---
title: "Security digest: May 25, 2026"
url: https://erroneo.us/security/2026-05-25/
description: "May 25, 2026 vulnerability digest: 1 brief (Mirasvit Cache Warmer CVE-2026-45247: Magento…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2026-05-25
date_modified: 2026-10-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: May 25, 2026

1 editorial brief.

## Take stock

- Check exposure: Mirasvit Cache Warmer CVE-2026-45247: Magento Cookie RCE . Magento Open Source and Adobe Commerce merchants and agencies whose stores include mirasvit/module-cache-warmer, directly or bundled with other Mirasvit extensions.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Mirasvit Cache Warmer CVE-2026-45247: Magento Cookie RCE](https://erroneo.us/security/briefs/mirasvit-cache-warmer-cve-2026-45247-magento-rce/index.md): If any Magento store you run has Mirasvit Cache Warmer, including as part of another Mirasvit package, make sure it is on 1.11.12 or later (1.11.16 adds more cookie hardening) and check for webshells if it was behind in late May or June 2026.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2026-05-25/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt