#magento

Field Note · Jun 5, 2026 · Colten Anderson

One cookie to your storefront homepage is shell. CVE-2026-45247 has a Saturday deadline.

An unauthenticated RCE in the Mirasvit Cache Warmer extension is already being hit at scale, and CISA's federal patch deadline is essentially now. If you run Magento, you act today.