Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
Mirasvit · Mirasvit Full Page Cache Warmer
Date added (CISA)
2026-06-03
Remediation due
2026-06-06
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.