# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity stores. Attackers can ...](https://agentprime.io/advisories/GHSA-q8p3-7h6h-ghfr.md)
  `GHSA-q8p3-7h6h-ghfr`, `CVE-2026-81702`, `PYSEC-2026-3962` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-345
- [openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature...](https://agentprime.io/advisories/GHSA-wxx9-p55f-wm34.md)
  `GHSA-wxx9-p55f-wm34`, `CVE-2026-81701`, `PYSEC-2026-3778` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired keys by only checking VALIDSIG status without ins...](https://agentprime.io/advisories/GHSA-x38r-8wf3-q9hq.md)
  `GHSA-x38r-8wf3-q9hq`, `CVE-2026-81700`, `PYSEC-2026-3777` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers ca...](https://agentprime.io/advisories/GHSA-gw2m-mj6q-59hc.md)
  `GHSA-gw2m-mj6q-59hc`, `CVE-2026-81698`, `PYSEC-2026-3776` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Command injection
- [openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to r...](https://agentprime.io/advisories/GHSA-539p-fxf4-7fv8.md)
  `GHSA-539p-fxf4-7fv8`, `CVE-2026-81696`, `PYSEC-2026-3775` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection
- [openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious key_id con...](https://agentprime.io/advisories/GHSA-jwfm-99h7-2w5x.md)
  `GHSA-jwfm-99h7-2w5x`, `CVE-2026-81695`, `PYSEC-2026-3774` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection
- [openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the AES-GCM authenticated manifest) before printing them in the verify-usb comma...](https://agentprime.io/advisories/GHSA-c793-rj9w-r3wg.md)
  `GHSA-c793-rj9w-r3wg`, `CVE-2026-81694`, `PYSEC-2026-3960` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection
- [openssl_encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing attackers to inject control characters and line separators into the irreversible-removal c...](https://agentprime.io/advisories/GHSA-49h2-qmcq-wvvc.md)
  `GHSA-49h2-qmcq-wvvc`, `CVE-2026-81685`, `PYSEC-2026-3793` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-116
- [openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the works...](https://agentprime.io/advisories/GHSA-2jv6-qqfm-m46m.md)
  `GHSA-2jv6-qqfm-m46m`, `CVE-2026-81681`, `PYSEC-2026-3791` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. ...](https://agentprime.io/advisories/GHSA-grhj-cpmg-f5mx.md)
  `GHSA-grhj-cpmg-f5mx`, `CVE-2026-81680`, `PYSEC-2026-3957` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing](https://agentprime.io/advisories/CVE-2026-19092.md)
  `CVE-2026-19092` · CVE record: Unknown Tutor LMS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection
- [UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution](https://agentprime.io/advisories/CVE-2026-81735.md)
  `CVE-2026-81735` · CVE record: bytedance UI-TARS-desktop · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Authentication bypass
- [openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email](https://agentprime.io/advisories/CVE-2026-81707.md)
  `CVE-2026-81707` · CVE record: jahlives openssl_encrypt · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-20
- [Telnyx MCP Server through 6.83.0 Missing Authentication on Streamable HTTP Transport](https://agentprime.io/advisories/CVE-2026-81098.md)
  `CVE-2026-81098` · CVE record: team-telnyx telnyx-mcp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Authentication bypass
- [ToolUniverse through 1.2.6 Unauthenticated Remote Code Execution via python_code_executor Sandbox Escape](https://agentprime.io/advisories/CVE-2026-81096.md)
  `CVE-2026-81096` · CVE record: mims-harvard ToolUniverse · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection
- [mcp-router CLI before 0.6.3 Binds the MCP Aggregator to All Interfaces Without Requiring Authentication](https://agentprime.io/advisories/CVE-2026-81094.md)
  `CVE-2026-81094` · CVE record: mcp-router mcp-router · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Authentication bypass
- [Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x](https://agentprime.io/advisories/CVE-2026-16279.md)
  `CVE-2026-16279` · CVE record: Dassault Systèmes 3DSwymer · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Broken access control
- [Liman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)](https://agentprime.io/advisories/CVE-2026-57499.md)
  `CVE-2026-57499` · CVE record: limanmys core · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Command injection, CWE-20
- [Flowintel Fails to Invalidate Active Sessions After Password Change](https://agentprime.io/advisories/CVE-2026-81826.md)
  `CVE-2026-81826` · CVE record: flowintel flowintel · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Authentication bypass
- [Multiple Vulnerabilities in TOOOLS' iSquad](https://agentprime.io/advisories/CVE-2026-81675.md)
  `CVE-2026-81675` · CVE record: TOOOLS iSquad · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: SQL injection
- [Multiple Vulnerabilities in TOOOLS' iSquad](https://agentprime.io/advisories/CVE-2026-81674.md)
  `CVE-2026-81674` · CVE record: TOOOLS iSquad · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: SQL injection
- [Multiple Vulnerabilities in TOOOLS' iSquad](https://agentprime.io/advisories/CVE-2026-81673.md)
  `CVE-2026-81673` · CVE record: TOOOLS iSquad · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: SQL injection
- [Multiple Vulnerabilities in TOOOLS' iSquad](https://agentprime.io/advisories/CVE-2026-81672.md)
  `CVE-2026-81672` · CVE record: TOOOLS iSquad · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: SQL injection
- [Zbtlink MQWrt infosrvd Command Injection](https://agentprime.io/advisories/CVE-2026-74233.md)
  `CVE-2026-74233` · CVE record: Zbtlink WE1326 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Command injection, Hard-coded credentials
- [Zbtlink MQWrt yunmgrd Cloud C2 Implant](https://agentprime.io/advisories/CVE-2026-74232.md)
  `CVE-2026-74232` · CVE record: Zbtlink L3_V2_8 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-300, CWE-506
- [WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-78292.md)
  `CVE-2026-78292` · CVE record: hashthemes Hash Form · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Insecure deserialization
- [WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-78288.md)
  `CVE-2026-78288` · CVE record: Jonathan de Jong Beautiful Taxonomy Filters · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: SQL injection
- [WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-78286.md)
  `CVE-2026-78286` · CVE record: INFINITUM FORM Geo Controller · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Insecure deserialization
- [WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-78274.md)
  `CVE-2026-78274` · CVE record: WP Manage Ninja Fluent Boards Pro · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Epayco plugin <= 8.4.6 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-78260.md)
  `CVE-2026-78260` · CVE record: ePayco Epayco · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: SQL injection
- [WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-32566.md)
  `CVE-2026-32566` · CVE record: ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Privilege escalation
- [WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.17 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-32479.md)
  `CVE-2026-32479` · CVE record: CODEPRESS IT Solutions LLC Visitor Traffic Real Time Statistics Pro · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: SQL injection
- [Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata](https://agentprime.io/advisories/CVE-2026-59354.md)
  `CVE-2026-59354` · CVE record: VMware by Broadcom Spring Security (OAuth2 Authorization Server module) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-20
- [Spring Framework Improper Path Limitation in XsltView](https://agentprime.io/advisories/GHSA-pc63-qcmh-9cmg.md)
  `GHSA-pc63-qcmh-9cmg`, `CVE-2026-47884` · Maven `org.springframework:spring-webmvc`: affected `<=5.2.25.RELEASE || >=5.3.0, <=5.3.49 || >=6.0.0, <=6.0.30 || >=6.1.0, <=6.1.28 || >=6.2.0, <=6.2.19 || >=7.0.0, <7.0.9`, fixed in `7.0.9` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Path traversal
- [Spring Framework Server Sent Event stream corruption while rendering fragments](https://agentprime.io/advisories/GHSA-j9f9-w8pj-32f8.md)
  `GHSA-j9f9-w8pj-32f8`, `CVE-2026-47890` · Maven `org.springframework:spring-webflux` and 1 more: affected `>=6.2.0, <=6.2.19 || >=7.0.0, <7.0.9`, fixed in `7.0.9` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection
- [Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints](https://agentprime.io/advisories/GHSA-9qf2-26p9-2q2q.md)
  `GHSA-9qf2-26p9-2q2q`, `CVE-2026-47892` · Maven `org.springframework:spring-webflux`: affected `>=5.2.5.RELEASE, <=5.2.25.RELEASE || >=5.3.0, <=5.3.49 || >=6.0.0, <=6.0.30 || >=6.1.0, <=6.1.28 || >=6.2.0, <=6.2.19 || >=7.0.0, <7.0.9`, fixed in `7.0.9` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Broken access control
- [Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Deletion via Candidate Profile Mass Assignment](https://agentprime.io/advisories/CVE-2026-77016.md)
  `CVE-2026-77016` · CVE record: Unknown Workeera · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Path traversal
- [Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1](https://agentprime.io/advisories/CVE-2026-77991.md)
  `CVE-2026-77991` · CVE record: joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Unrestricted file upload
- [Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder](https://agentprime.io/advisories/CVE-2026-47891.md)
  `CVE-2026-47891` · CVE record: Spring Spring Framework · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Denial of service
- [Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces](https://agentprime.io/advisories/CVE-2026-59270.md)
  `CVE-2026-59270` · CVE record: Spring Spring Security · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026
- [An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js components.](https://agentprime.io/advisories/CVE-2026-75357.md)
  `CVE-2026-75357` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection
- [The static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to path traversal.](https://agentprime.io/advisories/CVE-2026-75337.md)
  `CVE-2026-75337` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Path traversal
- [Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php.](https://agentprime.io/advisories/CVE-2026-37072.md)
  `CVE-2026-37072` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Broken access control
- [Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the s…](https://agentprime.io/advisories/CVE-2026-37071.md)
  `CVE-2026-37071` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Privilege escalation
- [Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.](https://agentprime.io/advisories/CVE-2026-37065.md)
  `CVE-2026-37065` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure
- [A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument.](https://agentprime.io/advisories/CVE-2026-37007.md)
  `CVE-2026-37007` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Path traversal
- [A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations.](https://agentprime.io/advisories/CVE-2026-37006.md)
  `CVE-2026-37006` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Authentication bypass
- [Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.](https://agentprime.io/advisories/CVE-2026-37003.md)
  `CVE-2026-37003` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection
- [A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0.](https://agentprime.io/advisories/CVE-2026-35869.md)
  `CVE-2026-35869` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-20
- [A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.0.4.](https://agentprime.io/advisories/CVE-2026-35868.md)
  `CVE-2026-35868` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-20
- [An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.e…](https://agentprime.io/advisories/CVE-2026-30612.md)
  `CVE-2026-30612` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-494
- [An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml co…](https://agentprime.io/advisories/CVE-2026-26897.md)
  `CVE-2026-26897` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure
- [KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF](https://agentprime.io/advisories/CVE-2026-65956.md)
  `CVE-2026-65956` · CVE record: 1Panel-dev KubePi · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Authentication bypass
- [Injection in WebPros Plesk](https://agentprime.io/advisories/CVE-2026-65646.md)
  `CVE-2026-65646` · CVE record: WebPros Plesk · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Other injection
- [Authentication bypass in Veeam One](https://agentprime.io/advisories/CVE-2026-65641.md)
  `CVE-2026-65641` · CVE record: Veeam One · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Authentication bypass
- [OS command injection in Dell Cloud Disaster Recovery](https://agentprime.io/advisories/CVE-2026-70419.md)
  `CVE-2026-70419` · CVE record: Dell Cloud Disaster Recovery · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Command injection
- [Bucket Squatting in Vertex AI Search for Commerce](https://agentprime.io/advisories/CVE-2026-19485.md)
  `CVE-2026-19485` · CVE record: Google Cloud Vertex AI Search for Commerce · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Weak cryptography or TLS
- [NebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration](https://agentprime.io/advisories/CVE-2026-81032.md)
  `CVE-2026-81032` · CVE record: vesoft-inc nebula · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Authentication bypass
- [ILIAS PHP Object Injection via Shibboleth Logout](https://agentprime.io/advisories/CVE-2026-80428.md)
  `CVE-2026-80428` · CVE record: ILIAS-eLearning e.V. ILIAS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Insecure deserialization
- [senaite.core Vulnerable to Eval Injection and Missing Authorization](https://agentprime.io/advisories/GHSA-jrw6-7x4q-w25j.md)
  `GHSA-jrw6-7x4q-w25j`, `CVE-2026-54569`, `PYSEC-2026-3919` · PyPI `senaite-core`: affected `>=2.0.0, <=2.6.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection, Broken access control

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA4LTI2VDE1OjI4OjQ3LjAwMDAwMFoiLCJHSFNBLWpydzYtN3g0cS13MjVqIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA4LTI3VDE3OjIxOjAxLjI5MzAwMFoiLCJHSFNBLThnbXgtdzltOC12eDdxIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA4LTI3VDE3OjIxOjAxLjI5MzAwMFoiLCJHSFNBLThnbXgtdzltOC12eDdxIl0>. Everything for agents: <https://agentprime.io/llms.txt>.