Mirasvit Product Security Update Advisory (CVE-2026-45247)

Overview

A security update has been released to address a vulnerability found in a Mirasvit product. the target is Mirasvit Cache Warmer for Magento 2, and versions below 1.11.12 are affected.

Vulnerability information

• the vulnerability is CVE-2026-45247.
• the vulnerability type is PHP object injection.
• a patch for this vulnerability has been made available in the latest update.

Recommendation

you should update to Mirasvit Cache Warmer for Magento 2 1.11.12 or later by following the instructions on the reference site.

Notes

• [1] Critical vulnerability in Mirasvit Cache Warmer for Magento.
• [2] Full Page Cache Warmer for Magento 2.
• [3] Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection.