Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:21:15 +0000 bdu:2026-14550 https://cve.radiocsirt.org/vuln/bdu:2026-14550 bdu:2026-14550 https://cve.radiocsirt.org/vuln/bdu:2026-14550 EUVD-2026-324494 https://cve.radiocsirt.org/vuln/euvd-2026-324494 EUVD-2026-324494 https://cve.radiocsirt.org/vuln/euvd-2026-324494 fkie_cve-2026-45247 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45247 <p>Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP&#39;s native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.</p> <p>Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP&#39;s native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-45247 GHSA-rg8p-9rpg-r32p https://cve.radiocsirt.org/vuln/ghsa-rg8p-9rpg-r32p <p>Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP&#39;s native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.</p> <p>Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP&#39;s native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-rg8p-9rpg-r32p