# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [ntfs: validate resident attribute lists and harden the validator](https://agentprime.io/advisories/CVE-2026-80674.md)
  `CVE-2026-80674` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()](https://agentprime.io/advisories/CVE-2026-80673.md)
  `CVE-2026-80673` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [perf sched: Fix register_pid() overflow, strcpy, and BUG_ON](https://agentprime.io/advisories/CVE-2026-80671.md)
  `CVE-2026-80671` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [perf tools: Use perf_env\_\_get_cpu_topology() in machine\_\_resolve()](https://agentprime.io/advisories/CVE-2026-80670.md)
  `CVE-2026-80670` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [netfilter: nf_conntrack_expect: use conntrack GC to reap expectations](https://agentprime.io/advisories/CVE-2026-80668.md)
  `CVE-2026-80668` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag](https://agentprime.io/advisories/CVE-2026-80634.md)
  `CVE-2026-80634` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen](https://agentprime.io/advisories/CVE-2026-80630.md)
  `CVE-2026-80630` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [net: airoha: fix foe_check_time allocation size](https://agentprime.io/advisories/CVE-2026-80617.md)
  `CVE-2026-80617` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [net: lwtunnel: Drop skb metadata before LWT encapsulation](https://agentprime.io/advisories/CVE-2026-80612.md)
  `CVE-2026-80612` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [qede: fix out-of-bounds check for cqe->len_list\[\]](https://agentprime.io/advisories/CVE-2026-80609.md)
  `CVE-2026-80609` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read](https://agentprime.io/advisories/CVE-2026-80603.md)
  `CVE-2026-80603` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [batman-adv: dat: acquire ARP hw source only after skb realloc](https://agentprime.io/advisories/CVE-2026-80600.md)
  `CVE-2026-80600` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion](https://agentprime.io/advisories/CVE-2026-76581.md)
  `CVE-2026-76581` · CVE record: wpmudev WPMU DEV Dashboard · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS
- [Deserialization of untrusted data in Tsuyoshi Saito SOY CMS](https://agentprime.io/advisories/CVE-2026-78032.md)
  `CVE-2026-78032` · CVE record: Tsuyoshi Saito SOY CMS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Insecure deserialization
- [Cross-site scripting in Pocket](https://agentprime.io/advisories/CVE-2026-82090.md)
  `CVE-2026-82090` · CVE record: getpocket Pocket · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Cross-site scripting (XSS)
- [Green-Computing｜NUMail - OS Command Injection](https://agentprime.io/advisories/CVE-2026-82082.md)
  `CVE-2026-82082` · CVE record: Green-Computing NUMail · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Command injection
- [Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger wireless scans and retrieve AP-client scan results via sendi…](https://agentprime.io/advisories/CVE-2026-51663.md)
  `CVE-2026-51663` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain port-forwarding rules via sending a crafted POST request t…](https://agentprime.io/advisories/CVE-2026-51661.md)
  `CVE-2026-51661` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST re…](https://agentprime.io/advisories/CVE-2026-51660.md)
  `CVE-2026-51660` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain syslog-related configuration via sending a crafted POST request t…](https://agentprime.io/advisories/CVE-2026-51657.md)
  `CVE-2026-51657` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain diagnostic configuration and ping log contents via sending a c…](https://agentprime.io/advisories/CVE-2026-51649.md)
  `CVE-2026-51649` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain parental-control rules via sending a crafted POST request to…](https://agentprime.io/advisories/CVE-2026-51646.md)
  `CVE-2026-51646` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the administrative username via sending a crafted POST request…](https://agentprime.io/advisories/CVE-2026-51645.md)
  `CVE-2026-51645` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sending a crafted POST r…](https://agentprime.io/advisories/CVE-2026-51643.md)
  `CVE-2026-51643` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Wi-Fi ACL rules via sending a crafted POST request to /cgi-bin…](https://agentprime.io/advisories/CVE-2026-51636.md)
  `CVE-2026-51636` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST…](https://agentprime.io/advisories/CVE-2026-51628.md)
  `CVE-2026-51628` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a craf…](https://agentprime.io/advisories/CVE-2026-51626.md)
  `CVE-2026-51626` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WAN configuration data via sending a crafted POST request to /cgi-bi…](https://agentprime.io/advisories/CVE-2026-51622.md)
  `CVE-2026-51622` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to arbitrarily force a reboot via sending a crafted MQTT message.](https://agentprime.io/advisories/CVE-2026-51611.md)
  `CVE-2026-51611` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input.](https://agentprime.io/advisories/CVE-2026-37751.md)
  `CVE-2026-37751` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Command injection
- [grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control.](https://agentprime.io/advisories/CVE-2026-37236.md)
  `CVE-2026-37236` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs](https://agentprime.io/advisories/CVE-2026-78174.md)
  `CVE-2026-78174` · CVE record: WatchGuard Dimension · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure, Privilege escalation
- [Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)](https://agentprime.io/advisories/CVE-2026-61800.md)
  `CVE-2026-61800` · CVE record: wazuh wazuh · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Path traversal
- [Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-19315.md)
  `CVE-2026-19315` · CVE record: WatchGuard Fireware OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint](https://agentprime.io/advisories/CVE-2026-13086.md)
  `CVE-2026-13086` · CVE record: WatchGuard Fireware OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption, Hard-coded credentials
- [Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-19313.md)
  `CVE-2026-19313` · CVE record: WatchGuard Fireware OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-19318.md)
  `CVE-2026-19318` · CVE record: WatchGuard Fireware OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption, CWE-129
- [Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel](https://agentprime.io/advisories/CVE-2026-76943.md)
  `CVE-2026-76943` · CVE record: Xiiaozet Xiiaozet LK100W · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Authentication bypass
- [Xiiaozet LK100W Missing Authentication for Critical Function](https://agentprime.io/advisories/CVE-2026-78239.md)
  `CVE-2026-78239` · CVE record: Xiiaozet Xiiaozet LK100W · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Authentication bypass
- [Ebyte NA111-M Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2026-69658.md)
  `CVE-2026-69658` · CVE record: Ebyte Ebyte NA111-M Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint](https://agentprime.io/advisories/GHSA-6wvf-77m9-58rm.md)
  `GHSA-6wvf-77m9-58rm`, `CVE-2026-37004`, `PYSEC-2026-3861` · PyPI `litellm`: affected `<1.83.7`, fixed in `1.83.7` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection
- [Ebyte NA111-M Use of GET Request Method With Sensitive Query Strings](https://agentprime.io/advisories/CVE-2026-76179.md)
  `CVE-2026-76179` · CVE record: Ebyte Ebyte NA111-M Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-598
- [Ebyte NA111-M Use of Client-Side Authentication](https://agentprime.io/advisories/CVE-2026-71187.md)
  `CVE-2026-71187` · CVE record: Ebyte Ebyte NA111-M Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-603
- [Ebyte NA111-M Missing Authentication for Critical Function](https://agentprime.io/advisories/CVE-2026-73125.md)
  `CVE-2026-73125` · CVE record: Ebyte Ebyte NA111-M Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Authentication bypass
- [Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users](https://agentprime.io/advisories/CVE-2026-50152.md)
  `CVE-2026-50152` · CVE record: ceph ceph · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Broken access control
- [FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization](https://agentprime.io/advisories/CVE-2026-68929.md)
  `CVE-2026-68929` · CVE record: labring FastGPT · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Authentication bypass, Broken access control
- [Improper Certificate Validation in ASE 2000](https://agentprime.io/advisories/CVE-2026-18717.md)
  `CVE-2026-18717` · CVE record: Applied Systems Engineering ASE2000 V2 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [Trilium: Note Import to RCE via Book Note](https://agentprime.io/advisories/CVE-2026-53579.md)
  `CVE-2026-53579` · CVE record: TriliumNext Trilium · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml](https://agentprime.io/advisories/CVE-2026-53578.md)
  `CVE-2026-53578` · CVE record: TriliumNext Trilium · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause](https://agentprime.io/advisories/CVE-2026-74820.md)
  `CVE-2026-74820` · CVE record: ServiceNow ServiceNow AI Platform · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: SQL injection
- [Unauthenticated Privilege Escalation via System Configuration Image Upload Processor](https://agentprime.io/advisories/CVE-2026-18886.md)
  `CVE-2026-18886` · CVE record: ServiceNow ServiceNow AI Platform · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Broken access control
- [Unauthenticated Remote Code Execution in GraphQL Composite Data API](https://agentprime.io/advisories/CVE-2026-18885.md)
  `CVE-2026-18885` · CVE record: ServiceNow ServiceNow AI Platform · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection
- [Sandbox Escape in ServiceNow AI Platform](https://agentprime.io/advisories/CVE-2026-6876.md)
  `CVE-2026-6876` · CVE record: ServiceNow ServiceNow AI Platform · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection, CWE-693, CWE-1284
- [Server Sent Event stream corruption in Spring MVC functional web framework](https://agentprime.io/advisories/CVE-2026-59313.md)
  `CVE-2026-59313` · CVE record: Spring Spring Framework · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection
- [Spring Framework Safety Guard Bypass via SpEL Expression Compilation](https://agentprime.io/advisories/CVE-2026-59283.md)
  `CVE-2026-59283` · CVE record: Spring Spring Framework · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-913
- [Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client](https://agentprime.io/advisories/CVE-2026-48996.md)
  `CVE-2026-48996` · CVE record: TriliumNext Trilium · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was co...](https://agentprime.io/advisories/GHSA-587j-4r3v-cm2c.md)
  `GHSA-587j-4r3v-cm2c`, `CVE-2026-81719`, `PYSEC-2026-3802` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection
- [openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted (attacker with physi...](https://agentprime.io/advisories/GHSA-8jx3-27qf-3p97.md)
  `GHSA-8jx3-27qf-3p97`, `CVE-2026-81717`, `PYSEC-2026-3801` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing trust anchor. An operator who confirms a short (f...](https://agentprime.io/advisories/GHSA-xg52-638v-jc5m.md)
  `GHSA-xg52-638v-jc5m`, `CVE-2026-81714`, `PYSEC-2026-3799` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Weak cryptography or TLS
- [openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create shadowed contact entries invisible until the co...](https://agentprime.io/advisories/GHSA-8gmx-w9m8-vx7q.md)
  `GHSA-8gmx-w9m8-vx7q`, `CVE-2026-81706`, `PYSEC-2026-3781` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-345

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA4LTI3VDE3OjIxOjAxLjI5MzAwMFoiLCJHSFNBLThnbXgtdzltOC12eDdxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA4LTI4VDA2OjUyOjQ4Ljg5NjAwMFoiLCJDVkUtMjAyNi04MDY4MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA4LTI4VDA2OjUyOjQ4Ljg5NjAwMFoiLCJDVkUtMjAyNi04MDY4MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.