The Hacker Newsinfo@thehackernews.com (The Hacker News)
CISA urges patching of exploited Magento RCE flaw CVE-2026-45247
CISA has added an exploited Remote Code Execution (RCE) vulnerability in Magento, identified as CVE-2026-45247, to its Known Exploited Vulnerabilities (KEV) Catalog. The update emphasizes the vulnerability's active exploitation in the wild, which heightens the urgency for organizations to apply necessary patches. This move aligns with ongoing cybersecurity efforts to mitigate risks associated with such vulnerabilities, especially concerning e-commerce platforms.
Story timeline CVE-2026-45247
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 3 Jun · 20:51 UTC | CISA | CISA warns of exploits in Magento cache extension CVE-2026-45247 |
| Thu 4 Jun · 02:11 UTC | CISA | CISA flags Mirasvit cache flaw CVE-2026-45247 as exploited. |
| Thu 4 Jun · 08:50 UTC | The Hacker News | CISA urges patching of exploited Magento RCE flaw CVE-2026-45247 (this article) |
| Thu 4 Jun · 12:48 UTC | SecurityWeek | CISA warns federal agencies to patch critical Magento cache flaw |
| Thu 4 Jun · 17:50 UTC | Security Affairs | CISA adds Magento cache flaw CVE-2026-45247 to KEV catalogue |