cybercrime.clubhttps://cybercrime.club/tags/mirasvit/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usSat, 06 Jun 2026 01:12:03 -0400Mirasvit Cache Warmer CVE-2026-45247: One Cookie Pops Any Magento Store, No Auth Requiredhttps://cybercrime.club/posts/mirasvit-cache-warmer-cve-2026-45247-magento-php-object-injection-rce/Sat, 06 Jun 2026 01:12:03 -0400https://cybercrime.club/posts/mirasvit-cache-warmer-cve-2026-45247-magento-php-object-injection-rce/CISA added CVE-2026-45247 to KEV after Imperva confirmed active exploitation. A single crafted CacheWarmer cookie gives unauthenticated RCE on Magento and Adobe Commerce stores running Mirasvit Full Page Cache Warmer below 1.11.12.vulnerabilities