[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fR7Wxqd68WW99iVaIGOdUU7cvwzmK9fjOiF5mYAtpgVc":3},{"article":4,"iocs":47,"watch_terms":52,"solutions":53,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"20d1649a-f5f6-4221-9471-74f3d4904442","CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog","cisa-adds-exploited-magento-rce-flaw-cve-2026-45247-to-kev-catalog-886f24","The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer, a popular Magento full-page cache extension, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-45247 (CVSS score: 9.8), is a case of deserialization of untrusted","CISA has added CVE-2026-45247, a critical remote code execution vulnerability in Mirasvit Cache Warmer (a Magento extension), to its Known Exploited Vulnerabilities catalog following confirmed active exploitation. The flaw is a PHP object deserialization vulnerability (CVSS 9.8) affecting all versions prior to 1.11.12 that allows unauthenticated attackers to execute arbitrary code via a crafted CacheWarmer cookie. Imperva has observed active attack campaigns primarily targeting gaming and business sites in the U.S., UK, France, and Australia, with FCEB agencies ordered to patch by June 6, 2026.","CISA adds critical Magento RCE flaw CVE-2026-45247 to KEV catalog after active exploitation.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F06\u002Fcisa-adds-exploited-magento-rce-flaw.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEi8P5o_wfJsxsTaxY4OONIm2y5N5x9heoFeLchfLU13YA36tGQGJtu00tOCQSKhCTBFobAAWfhXLtNGMu8ZCG7ozeLVggi1tnQVRK_1mJHd6eq1YSb5AlRZq5eDp3rGDL2Uli_b3aBPMBsLfMJ5QEm_XW1MF43_dcCf64rSbVrhsUakhaOAn5-GOmuLiq0s\u002Fs1600\u002Fmag.jpg","2026-06-04T07:19:33+00:00","2026-06-04T10:00:27.338506+00:00",9,[17,20,22,25,27,29],{"name":18,"type":19},"Mirasvit Cache Warmer","product",{"name":21,"type":19},"Magento",{"name":23,"type":24},"Mirasvit","vendor",{"name":26,"type":24},"Imperva",{"name":28,"type":24},"Sansec",{"name":30,"type":24},"CISA","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",[48],{"type":49,"value":50,"context":51},"cve","CVE-2026-45247","Critical PHP object deserialization RCE in Mirasvit Cache Warmer Magento extension, CVSS 9.8",[23,26,28],{"controls":54,"vendors":141},[55,84,113],{"slug":56,"name":57,"problem":58,"products":59},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":85,"name":86,"problem":87,"products":88},"patch-management","Automated patch management","Known holes get closed in days, not months.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":114,"name":115,"problem":116,"products":117},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","app-and-api-protector","Akamai App & API Protector","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fapp-and-api-protector","Web application firewall, bot and DDoS protection for websites and APIs.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"f5","F5","\u002Fvendor-logos\u002Ff5.png","web-app-and-api-protection","F5 Web App and API Protection","https:\u002F\u002Fwww.f5.com\u002Fsolutions\u002Fweb-app-and-api-protection","Web application firewall, API security, bot management and DDoS mitigation, as a service or self-managed.",{"vendor_slug":135,"vendor_name":26,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"imperva","\u002Fvendor-logos\u002Fimperva.png","imperva-cloud-waf","Imperva Cloud WAF","https:\u002F\u002Fwww.imperva.com\u002Fproducts\u002Fweb-application-firewall-waf\u002F","Cloud web application firewall with DDoS and bot protection.",[142],{"slug":135,"name":26,"logo_path":136,"roles":143},[144],"reported_by",{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":155},"critical-magento-extension-vulnerability-enables-remote-code-execution","Critical Magento Extension Vulnerability Enables Remote Code Execution","A critical PHP object deserialization vulnerability (CVE-2026-45247) in the Mirasvit Cache Warmer extension for Magento allows unauthenticated attackers to execute arbitrary code through a crafted cookie. This supply chain vulnerability affects all versions prior to 1.11.12 and demonstrates how third-party extensions can introduce severe security risks to e-commerce platforms. The active exploitation campaigns targeting gaming and business sites highlight the urgent need for comprehensive patch management and supply chain security practices. Organizations must treat third-party components with the same security rigor as their core systems to prevent such critical exposures.",[150,151,152,153,154],"CIS Control 7","NIST SP 800-161","NIST CSF PR.IP-12","CIS Control 2","NIST SP 800-40",{}]