# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Incorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to configure forced reboot tasks via sending a crafted POST request to /c…](https://agentprime.io/advisories/CVE-2026-51674.md)
  `CVE-2026-51674` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the roaming enablement flag via sending a crafted POST request t…](https://agentprime.io/advisories/CVE-2026-51672.md)
  `CVE-2026-51672` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to query slave upgrade status and affect upgrade bookkeeping via sending…](https://agentprime.io/advisories/CVE-2026-51670.md)
  `CVE-2026-51670` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pairing and mesh-slave configuration via sending a crafted POST req…](https://agentprime.io/advisories/CVE-2026-51669.md)
  `CVE-2026-51669` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803.](https://agentprime.io/advisories/CVE-2026-51152.md)
  `CVE-2026-51152` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.](https://agentprime.io/advisories/CVE-2026-38577.md)
  `CVE-2026-38577` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Hard-coded credentials
- [D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow](https://agentprime.io/advisories/CVE-2026-82593.md)
  `CVE-2026-82593` · CVE record: D-Link DIR-825M · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Memory corruption
- [D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow](https://agentprime.io/advisories/CVE-2026-82592.md)
  `CVE-2026-82592` · CVE record: D-Link DIR-825M · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Memory corruption
- [SiYuan before v3.8.1 Stored XSS via block name](https://agentprime.io/advisories/CVE-2026-82654.md)
  `CVE-2026-82654` · CVE record: siyuan-note siyuan · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Cross-site scripting (XSS)
- [SiYuan before v3.8.1 Stored XSS via confirmDialog](https://agentprime.io/advisories/CVE-2026-82653.md)
  `CVE-2026-82653` · CVE record: siyuan-note siyuan · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Cross-site scripting (XSS)
- [AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token](https://agentprime.io/advisories/CVE-2026-82645.md)
  `CVE-2026-82645` · CVE record: WWBN AVideo · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Weak cryptography or TLS
- [Tenda HG10 Boa Web Server formIPv6Routing buffer overflow](https://agentprime.io/advisories/CVE-2026-82542.md)
  `CVE-2026-82542` · CVE record: Tenda HG10 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Memory corruption
- [TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption](https://agentprime.io/advisories/CVE-2026-82539.md)
  `CVE-2026-82539` · CVE record: TOTOLINK A720R · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Memory corruption
- [MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token](https://agentprime.io/advisories/CVE-2026-15980.md)
  `CVE-2026-15980` · CVE record: TangibleWP MyHome Core · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: CWE-289
- [Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout](https://agentprime.io/advisories/CVE-2026-15369.md)
  `CVE-2026-15369` · CVE record: Addify Custom User Registration Fields for WooCommerce · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Privilege escalation
- [Rodauth before 2.46.0 Authentication Bypass via webauthn_login](https://agentprime.io/advisories/CVE-2026-82466.md)
  `CVE-2026-82466` · CVE record: jeremyevans rodauth · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Authentication bypass
- [Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown](https://agentprime.io/advisories/CVE-2026-82460.md)
  `CVE-2026-82460` · CVE record: coderaiser cloudcmd · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Path traversal
- [argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP](https://agentprime.io/advisories/CVE-2026-82456.md)
  `CVE-2026-82456` · CVE record: argoproj-labs argocd-mcp · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: CWE-1327
- [Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in](https://agentprime.io/advisories/CVE-2026-82454.md)
  `CVE-2026-82454` · CVE record: omnivore-app omnivore · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Weak cryptography or TLS
- [rust-iot-platform Authentication Bypass via Missing Request Guards](https://agentprime.io/advisories/CVE-2026-82452.md)
  `CVE-2026-82452` · CVE record: iot-ecology rust-iot-platform · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Authentication bypass
- [Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key](https://agentprime.io/advisories/CVE-2026-82448.md)
  `CVE-2026-82448` · CVE record: Shinobi Systems Shinobi · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Hard-coded credentials
- [Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field](https://agentprime.io/advisories/CVE-2026-14494.md)
  `CVE-2026-14494` · CVE record: bdthemes SigmaForms Pro – AI Generated Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Unrestricted file upload
- [net: gro: properly validate BIG TCP aggregation criteria](https://agentprime.io/advisories/CVE-2026-80725.md)
  `CVE-2026-80725` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026
- [Icollect <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write via Default Publishing Password](https://agentprime.io/advisories/CVE-2026-77012.md)
  `CVE-2026-77012` · CVE record: Unknown 爱采集数据采集和发布插件 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Total Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure](https://agentprime.io/advisories/CVE-2026-16947.md)
  `CVE-2026-16947` · CVE record: Unknown Total processing card payments for WooCommerce · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation](https://agentprime.io/advisories/CVE-2026-16259.md)
  `CVE-2026-16259` · CVE record: Unknown Uix UserCenter · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Privilege escalation
- [Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator](https://agentprime.io/advisories/CVE-2026-10522.md)
  `CVE-2026-10522` · CVE record: Unknown MemberHero · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Privilege escalation
- [Multiple Vulnerabilities in IBM Concert Software](https://agentprime.io/advisories/CVE-2026-3627.md)
  `CVE-2026-3627` · CVE record: IBM Concert · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: SQL injection
- [Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement](https://agentprime.io/advisories/CVE-2026-19295.md)
  `CVE-2026-19295` · CVE record: IBM Langflow OSS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement](https://agentprime.io/advisories/CVE-2026-19286.md)
  `CVE-2026-19286` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information \[, \].](https://agentprime.io/advisories/CVE-2026-18527.md)
  `CVE-2026-18527` · CVE record: IBM Administration Runtime Expert for i · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Authentication bypass
- [Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name](https://agentprime.io/advisories/GHSA-9x44-4gxf-8c25.md)
  `GHSA-9x44-4gxf-8c25`, `CVE-2026-55634`, `PKSA-vgg9-cbdg-s4xt` · Packagist `pimcore/pimcore`: affected `<12.3.10 || >=2026.1.0, <2026.1.6`, fixed in `12.3.10`, `2026.1.6` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: SQL injection, Code injection
- [Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)](https://agentprime.io/advisories/GHSA-w23p-wrp7-ch38.md)
  `GHSA-w23p-wrp7-ch38`, `CVE-2026-55220`, `PKSA-kkjc-bw16-f3kq` · Packagist `pimcore/pimcore`: affected `<12.3.10 || >=2026.1.0, <2026.1.6`, fixed in `12.3.10`, `2026.1.6` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Insecure deserialization
- [plone.app.event vulnerable to denial of service via iCalendar import](https://agentprime.io/advisories/GHSA-r82h-mqw3-fc56.md)
  `GHSA-r82h-mqw3-fc56`, `CVE-2026-55247`, `PYSEC-2026-3883` · PyPI `plone-app-event`: affected `<5.2.4 || >=6.0.0a1, <6.0.1`, fixed in `5.2.4`, `6.0.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference](https://agentprime.io/advisories/CVE-2026-82021.md)
  `CVE-2026-82021` · CVE record: NousResearch hermes-agent · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-494
- [plone.app.portlets vulnerable to denial of service via RSS feed portlet](https://agentprime.io/advisories/GHSA-x5g3-w747-2h8q.md)
  `GHSA-x5g3-w747-2h8q`, `CVE-2026-55248`, `PYSEC-2026-3884` · PyPI `plone-app-portlets`: affected `<5.0.8 || >=6.0.0, <6.0.4 || >=7.0.0, <7.0.2`, fixed in `5.0.8`, `6.0.4`, `7.0.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [Potential authentication bypass leading to administrative access in Artifactory](https://agentprime.io/advisories/CVE-2026-82329.md)
  `CVE-2026-82329` · CVE record: jfrog artifactory · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.14 · Not analysed yet · Published 28 Aug 2026 · Tags: Authentication bypass
- [JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values](https://agentprime.io/advisories/CVE-2026-55378.md)
  `CVE-2026-55378` · CVE record: shriyanss js-recon · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Command injection
- [Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL \`LIKE\` pattern compiled by Janino (\`LikeExpression\`)](https://agentprime.io/advisories/GHSA-c64q-hj4j-375f.md)
  `GHSA-c64q-hj4j-375f`, `CVE-2026-55565` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)](https://agentprime.io/advisories/GHSA-73mf-m39p-wpm9.md)
  `GHSA-73mf-m39p-wpm9`, `CVE-2026-55559` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [Yamcs vulnerable to authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs \`executeSql\`](https://agentprime.io/advisories/GHSA-3g44-3m7x-cgg2.md)
  `GHSA-3g44-3m7x-cgg2`, `CVE-2026-55511` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints](https://agentprime.io/advisories/GHSA-x8mj-6p3q-g5pp.md)
  `GHSA-x8mj-6p3q-g5pp`, `CVE-2026-55068`, `GO-2026-6316` · Go `github.com/free5gc/free5gc`: affected `<4.2.2`, fixed in `4.2.2` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-20
- [Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)](https://agentprime.io/advisories/GHSA-cgc5-v3f2-8m2v.md)
  `GHSA-cgc5-v3f2-8m2v`, `CVE-2026-54755`, `GO-2026-6310` · Go `github.com/klever-io/klever-go`: affected `<1.7.19`, fixed in `1.7.19` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)](https://agentprime.io/advisories/GHSA-p7gw-2pcp-5pf8.md)
  `GHSA-p7gw-2pcp-5pf8`, `CVE-2026-54754`, `GO-2026-6315` · Go `github.com/klever-io/klever-go`: affected `<1.7.19`, fixed in `1.7.19` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption, Race condition, CWE-682
- [Kotaemon Missing Ownership Check in Conversation Functions](https://agentprime.io/advisories/CVE-2026-82281.md)
  `CVE-2026-82281` · CVE record: Cinnamon kotaemon · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Argo Rollouts Dashboard Unauthenticated Mutating Operations](https://agentprime.io/advisories/CVE-2026-82277.md)
  `CVE-2026-82277` · CVE record: argoproj argo-rollouts · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Authentication bypass
- [Redpanda Admin API Unauthenticated Superuser Access via Default Configuration](https://agentprime.io/advisories/CVE-2026-82266.md)
  `CVE-2026-82266` · CVE record: redpanda-data redpanda · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Authentication bypass
- [Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /\_proxy/ route, bypasses ENABLE_AUTHZ=true](https://agentprime.io/advisories/CVE-2026-54745.md)
  `CVE-2026-54745` · CVE record: kubeflow pipelines · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector](https://agentprime.io/advisories/CVE-2026-82078.md)
  `CVE-2026-82078` · CVE record: PaperCut PaperCut MF/NG · CVSS 9.4 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.63 · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [PaperCut MF/NG: Authentication Bypass](https://agentprime.io/advisories/CVE-2026-81578.md)
  `CVE-2026-81578` · CVE record: PaperCut PaperCut MF/NG · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.85 · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-305
- [Budibase before 3.41.3 Remote Code Execution via Plugin eval()](https://agentprime.io/advisories/CVE-2026-82244.md)
  `CVE-2026-82244` · CVE record: budibase server · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-82222.md)
  `CVE-2026-82222` · CVE record: Liquid Web / StellarWP GiveWP · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Insecure deserialization
- [Use after free in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-42007.md)
  `CVE-2026-42007` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [OAuth 1.0 session-fixation chain via unauthenticated provisional-consumer registration and insecure v1_0Allowed default](https://agentprime.io/advisories/CVE-2026-18918.md)
  `CVE-2026-18918` · CVE record: Eclipse Foundation Eclipse Lyo · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Cross-site scripting in Synology Chat Server](https://agentprime.io/advisories/CVE-2026-40541.md)
  `CVE-2026-40541` · CVE record: Synology Synology Chat Server · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Cross-site scripting (XSS)
- [ipvs: do not propagate one-packet flag to synced conns](https://agentprime.io/advisories/CVE-2026-80714.md)
  `CVE-2026-80714` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller](https://agentprime.io/advisories/CVE-2026-80694.md)
  `CVE-2026-80694` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [idpf: bound interrupt-vector register fill to the allocated array](https://agentprime.io/advisories/CVE-2026-80693.md)
  `CVE-2026-80693` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [KVM: s390: pci: Fix NULL dereference on AIBV allocation failure](https://agentprime.io/advisories/CVE-2026-80684.md)
  `CVE-2026-80684` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026
- [vxlan: re-fetch eth header after route_shortcircuit()](https://agentprime.io/advisories/CVE-2026-80681.md)
  `CVE-2026-80681` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA4LTI4VDA2OjUyOjQ4Ljg5NjAwMFoiLCJDVkUtMjAyNi04MDY4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA4LTMxVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi01MTY3NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA4LTMxVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi01MTY3NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.