# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution.](https://agentprime.io/advisories/CVE-2026-75334.md)
  `CVE-2026-75334` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: SQL injection
- [Zyplayer-Doc <=1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via WikiPageWebService.download().](https://agentprime.io/advisories/CVE-2026-75332.md)
  `CVE-2026-75332` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server <= 1.3.3 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2026-75330.md)
  `CVE-2026-75330` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: SQL injection
- [The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism.](https://agentprime.io/advisories/CVE-2026-75329.md)
  `CVE-2026-75329` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Authentication bypass
- [In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:](https://agentprime.io/advisories/CVE-2026-75327.md)
  `CVE-2026-75327` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Unrestricted file upload
- [DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/\*\*' parameters.](https://agentprime.io/advisories/CVE-2026-75325.md)
  `CVE-2026-75325` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Authentication bypass
- [The front-end interface /cms/category/list of MCMS <=6.2.0 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2026-68000.md)
  `CVE-2026-68000` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: SQL injection
- [A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the appl…](https://agentprime.io/advisories/CVE-2026-52103.md)
  `CVE-2026-52103` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection
- [An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component](https://agentprime.io/advisories/CVE-2026-51106.md)
  `CVE-2026-51106` · CVE record · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Denial of service, Insecure deserialization
- [Stomper 5e2741e is vulnerable to Use-After-Free.](https://agentprime.io/advisories/CVE-2026-26448.md)
  `CVE-2026-26448` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption
- [An issue was discovered in Denx U-Boot before 2026.04.](https://agentprime.io/advisories/CVE-2025-70293.md)
  `CVE-2025-70293` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption
- [An issue was discovered in Denx U-Boot before 2026.04.](https://agentprime.io/advisories/CVE-2025-70290.md)
  `CVE-2025-70290` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Memory corruption
- [An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file.](https://agentprime.io/advisories/CVE-2025-61165.md)
  `CVE-2025-61165` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Unrestricted file upload
- [Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains.](https://agentprime.io/advisories/CVE-2025-61163.md)
  `CVE-2025-61163` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-942
- [An issue was discovered in openRISC OR1200 commit 83ac6b.](https://agentprime.io/advisories/CVE-2025-51679.md)
  `CVE-2025-51679` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-1281
- [Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process.](https://agentprime.io/advisories/CVE-2023-42179.md)
  `CVE-2023-42179` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Broken access control
- [Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081](https://agentprime.io/advisories/CVE-2026-16639.md)
  `CVE-2026-16639` · CVE record: Drupal Internationalization Single Sign-On · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Authentication bypass
- [Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084](https://agentprime.io/advisories/CVE-2026-16641.md)
  `CVE-2026-16641` · CVE record: Drupal Commerce Elavon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-20
- [Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087](https://agentprime.io/advisories/CVE-2026-16644.md)
  `CVE-2026-16644` · CVE record: Drupal Webform REST · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Broken access control
- [PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088](https://agentprime.io/advisories/CVE-2026-16645.md)
  `CVE-2026-16645` · CVE record: Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Broken access control
- [TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow](https://agentprime.io/advisories/CVE-2026-79911.md)
  `CVE-2026-79911` · CVE record: TOTOLINK N600R · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter](https://agentprime.io/advisories/CVE-2026-80138.md)
  `CVE-2026-80138` · CVE record: MacWarrior clipbucket-v5 · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Command injection
- [TypeBot: Account takeover via brute-forceable 6-digit magic-link code](https://agentprime.io/advisories/CVE-2026-62862.md)
  `CVE-2026-62862` · CVE record: baptisteArno typebot.io · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session](https://agentprime.io/advisories/CVE-2026-78655.md)
  `CVE-2026-78655` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Authentication bypass, CWE-642
- [Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically](https://agentprime.io/advisories/CVE-2026-78619.md)
  `CVE-2026-78619` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-305, CWE-1025
- [DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename](https://agentprime.io/advisories/CVE-2026-80104.md)
  `CVE-2026-80104` · CVE record: eosphoros-ai DB-GPT · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [NVIDIA OpenShell: NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API…](https://agentprime.io/advisories/CVE-2026-65083.md)
  `CVE-2026-65083` · CVE record: NVIDIA OpenShell · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-184
- [Uncontrolled search path in NVIDIA OpenShell](https://agentprime.io/advisories/CVE-2026-65093.md)
  `CVE-2026-65093` · CVE record: NVIDIA OpenShell · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-427
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-78964.md)
  `CVE-2026-78964` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-79152.md)
  `CVE-2026-79152` · CVE record: Google Chrome · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Broken access control
- [Off-by-one error in Google Chrome](https://agentprime.io/advisories/CVE-2026-79148.md)
  `CVE-2026-79148` · CVE record: Google Chrome · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-193
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79056.md)
  `CVE-2026-79056` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-79058.md)
  `CVE-2026-79058` · CVE record: Google Chrome · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Broken access control
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-79090.md)
  `CVE-2026-79090` · CVE record: Google Chrome · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Privilege escalation
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79091.md)
  `CVE-2026-79091` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-78951.md)
  `CVE-2026-78951` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79064.md)
  `CVE-2026-79064` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79128.md)
  `CVE-2026-79128` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79140.md)
  `CVE-2026-79140` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-78909.md)
  `CVE-2026-78909` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-78937.md)
  `CVE-2026-78937` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79129.md)
  `CVE-2026-79129` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Google Chrome: Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65…](https://agentprime.io/advisories/CVE-2026-78985.md)
  `CVE-2026-78985` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-706
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-78945.md)
  `CVE-2026-78945` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79078.md)
  `CVE-2026-79078` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Type confusion in Google Chrome](https://agentprime.io/advisories/CVE-2026-78904.md)
  `CVE-2026-78904` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79026.md)
  `CVE-2026-79026` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-79138.md)
  `CVE-2026-79138` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79275.md)
  `CVE-2026-79275` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79149.md)
  `CVE-2026-79149` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-79131.md)
  `CVE-2026-79131` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-79189.md)
  `CVE-2026-79189` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-79188.md)
  `CVE-2026-79188` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-78900.md)
  `CVE-2026-78900` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-20
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79232.md)
  `CVE-2026-79232` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-79235.md)
  `CVE-2026-79235` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-79043.md)
  `CVE-2026-79043` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Heap-based buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-78948.md)
  `CVE-2026-78948` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-79111.md)
  `CVE-2026-79111` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-20
- [Heap-based buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-79130.md)
  `CVE-2026-79130` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA4LTI1VDIwOjEwOjAzLjgyODAwMFoiLCJDVkUtMjAyNi03OTEzMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA4LTI2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi03NTMzNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA4LTI2VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi03NTMzNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.