SECURITYJun 4 · 07:19 UTCTHE HACKER NEWS[email protected] (The Hacker News)

CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog

CISA added a critical remote code execution (RCE) vulnerability in Mirasvit Cache Warmer, a Magento extension, to its KEV catalog due to active exploitation. The flaw, CVE-2026-45247 with a CVSS score of 9.8, involves deserialization of untrusted data.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

CISAorganizationMirasvit Cache WarmertopicMagentotopicCVE-2026-45247topicKnown Exploited Vulnerabilities (KEV) catalogtopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 26 · 11:49 UTC
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
SECURITYMay 5 · 11:56 UTC
MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks
SECURITYApr 28 · 11:18 UTC
Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
SECURITYApr 10 · 07:37 UTC
Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure
SECURITYMay 7 · 17:55 UTC
Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access
SECURITYApr 20 · 17:14 UTC
SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files