CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-03 16:30 UTC
  • Importiert: 2026-06-10 10:28 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: b7bb3235c7fba6853ac7db74194c47aaeac29bae972721df11bad2dc8b4b2134

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer, a popular Magento full-page cache extension, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.

The vulnerability, tracked as CVE-2026-45247 (CVSS score: 9.8), is a case of deserialization of untrusted

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-45247

CRITICAL

9.8

CRITICAL

9.8

2026-05-26

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews