U.S. CISA adds Mirasvit Full Page Cache Warmer flaw to its Known Exploited Vulnerabilities catalog
2026-06-04T20:51:44Z•0e963f593cb106beb2dc1acd6910f6a5fec6191ee40764ee4250dfa0563929da
AndroidCISACVE-2025-48595CVE-2026-0826CVE-2026-20230CVE-2026-45247Cisco Unified CMFSBGamaredonHP PolyKnown Exploited VulnerabilitiesMirasvitOperation KRATOSOutlook espionagePoC/public exploitSSRFVisual Studio CodeWinRARactive exploitationbuffer overflowillegal streamingmodular malwarepublic disclosureroot RCEzero-day
What happened
Multiple high-risk vulnerabilities and active exploitation events were reported across enterprise and consumer software. CISA added the Mirasvit Full Page Cache Warmer flaw (CVE-2026-45247, CVSS 9.3) to its Known Exploited Vulnerabilities catalog; Cisco patched a critical unauthenticated SSRF in Unified CM (CVE-2026-20230) after public exploit code appeared; Rapid7 disclosed a critical unauthenticated stack-based overflow in HP Poly VoIP phones (CVE-2026-0826) that can lead to root RCE; and Google’s June Android updates fixed an actively exploited privilege-escalation bug (CVE-2025-48595). In-
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 0e963f593cb106beb2dc1acd6910f6a5fec6191ee40764ee4250dfa0563929da
- Enrichment time
- 2026-06-04T20:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.