Skip to content
OpenAdvisories

Archive

26 May 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-45247 Exploited Public exploit EPSS 26%

    Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection

    Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. A…

    KEV Jun 3, 2026
  • Critical 9.0
    CVE-2026-4480 Public exploit Scanner template EPSS 29%

    Samba: samba: remote code execution in printing subsystem via unescaped job description

    A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacke…