CVE-2026-45247: CRITICAL (CVSS 9.8), Actively Exploited (CISA KEV)

CRITICAL (CVSS 9.8), Actively Exploited (CISA KEV), EPSS 27.5%. Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted cal