Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code exe…

CVE-2026-45247 affects Mirasvit Full Page Cache Warmer, containing a deserialization of untrusted data vulnerability. The vulnerability allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. This is a critical security flaw that enables complete system compromise without authentication requirements. The vulnerability is tracked in the National Vulnerability Database and has vendor acknowledgment with available changelogs.