# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection](https://agentprime.io/advisories/CVE-2026-82692.md)
  `CVE-2026-82692` · CVE record: D-Link DNS-340L and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Command injection
- [D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection](https://agentprime.io/advisories/CVE-2026-82691.md)
  `CVE-2026-82691` · CVE record: D-Link DNS-320L and 3 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Command injection
- [D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection](https://agentprime.io/advisories/CVE-2026-82690.md)
  `CVE-2026-82690` · CVE record: D-Link DNS-327L and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Command injection
- [D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection](https://agentprime.io/advisories/CVE-2026-82689.md)
  `CVE-2026-82689` · CVE record: D-Link DNS-320L and 3 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Command injection
- [D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection](https://agentprime.io/advisories/CVE-2026-82688.md)
  `CVE-2026-82688` · CVE record: D-Link DNS-340L and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Command injection
- [Phison PS3111-S11 Controller Firmware Signature Verification Bypass](https://agentprime.io/advisories/CVE-2026-82876.md)
  `CVE-2026-82876` · CVE record: Phison Electronics Corporation PS3111-S11 Controller Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Weak cryptography or TLS
- [Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product](https://agentprime.io/advisories/CVE-2026-49003.md)
  `CVE-2026-49003` · CVE record: ZTE ZXDU68 S202 V5.0 · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Authentication bypass
- [ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-db](https://agentprime.io/advisories/CVE-2026-82874.md)
  `CVE-2026-82874` · CVE record: ToolJet ToolJet · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [hulumi before v1.3.2 SCP Template Tag-on-Create Bypass](https://agentprime.io/advisories/CVE-2026-82859.md)
  `CVE-2026-82859` · CVE record: kerberosmansour hulumi · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [hulumi before v1.3.2 Privilege Escalation via IAM Policy](https://agentprime.io/advisories/CVE-2026-82857.md)
  `CVE-2026-82857` · CVE record: kerberosmansour hulumi · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation
- [Google Cloud Build Comment Control Bypass via Webhook Suppression](https://agentprime.io/advisories/CVE-2026-19410.md)
  `CVE-2026-19410` · CVE record: Google Cloud Google Cloud Build · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Race condition, CWE-345
- [Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management](https://agentprime.io/advisories/CVE-2026-82628.md)
  `CVE-2026-82628` · CVE record: Colorful iGameCenter · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation
- [Missing authentication in Dell PowerStore 500T and others](https://agentprime.io/advisories/CVE-2026-58574.md)
  `CVE-2026-58574` · CVE record: Dell PowerStore 500T and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Authentication bypass
- [TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow](https://agentprime.io/advisories/CVE-2026-82616.md)
  `CVE-2026-82616` · CVE record: TOTOLINK NR1800X · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption
- [An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuild_class_views() in metagpt/repo_parser.py.](https://agentprime.io/advisories/CVE-2026-79408.md)
  `CVE-2026-79408` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Command injection
- [Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bi…](https://agentprime.io/advisories/CVE-2026-51740.md)
  `CVE-2026-51740` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset the device configuration and reboot the device via sending a cr…](https://agentprime.io/advisories/CVE-2026-51738.md)
  `CVE-2026-51738` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase system logs via sending a crafted POST request to /cgi-bin/cstecgi.…](https://agentprime.io/advisories/CVE-2026-51736.md)
  `CVE-2026-51736` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger mesh slave update coordination via sending a crafted POST r…](https://agentprime.io/advisories/CVE-2026-51734.md)
  `CVE-2026-51734` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi schedule entries via sending a crafted POST request to /…](https://agentprime.io/advisories/CVE-2026-51733.md)
  `CVE-2026-51733` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove VLAN entries via sending a crafted POST request to /cgi-bin/cstecgi…](https://agentprime.io/advisories/CVE-2026-51731.md)
  `CVE-2026-51731` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi ACL rules via sending a crafted POST request to /cgi-bin…](https://agentprime.io/advisories/CVE-2026-51730.md)
  `CVE-2026-51730` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to request deletion of a managed slave device via sending a crafted POST reque…](https://agentprime.io/advisories/CVE-2026-51729.md)
  `CVE-2026-51729` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the UploadFirmwareFile function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to upload a crafted firmware image via sending a crafted POST request…](https://agentprime.io/advisories/CVE-2026-51728.md)
  `CVE-2026-51728` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove parental-control rules via sending a crafted POST request to…](https://agentprime.io/advisories/CVE-2026-51726.md)
  `CVE-2026-51726` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the device clock via sending a crafted POST request to /cgi-bi…](https://agentprime.io/advisories/CVE-2026-51725.md)
  `CVE-2026-51725` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Smart QoS rules via sending a crafted POST request to /cgi-bin/…](https://agentprime.io/advisories/CVE-2026-51724.md)
  `CVE-2026-51724` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to install a custom CGI module via sending a crafted POST request to…](https://agentprime.io/advisories/CVE-2026-51723.md)
  `CVE-2026-51723` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to repoint the device to an attacker-controlled upstream Wi-Fi via se…](https://agentprime.io/advisories/CVE-2026-51722.md)
  `CVE-2026-51722` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the mesh pairing state via sending a crafted POST request to /cgi-bi…](https://agentprime.io/advisories/CVE-2026-51721.md)
  `CVE-2026-51721` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request…](https://agentprime.io/advisories/CVE-2026-51720.md)
  `CVE-2026-51720` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the delStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove static DHCP reservations via sending a crafted POST request…](https://agentprime.io/advisories/CVE-2026-51718.md)
  `CVE-2026-51718` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setOpModeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the device operating mode via sending a crafted POST request to /…](https://agentprime.io/advisories/CVE-2026-51717.md)
  `CVE-2026-51717` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the delMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove MAC filter rules via sending a crafted POST request to /cgi-…](https://agentprime.io/advisories/CVE-2026-51715.md)
  `CVE-2026-51715` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setManualDialCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulate WAN dial state via sending a crafted POST request to /cgi…](https://agentprime.io/advisories/CVE-2026-51713.md)
  `CVE-2026-51713` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to open a wireless pairing window via sending a crafted POST request to…](https://agentprime.io/advisories/CVE-2026-51711.md)
  `CVE-2026-51711` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter parental-control behavior via sending a crafted POST request t…](https://agentprime.io/advisories/CVE-2026-51710.md)
  `CVE-2026-51710` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure primary Wi-Fi settings via sending a crafted POST request…](https://agentprime.io/advisories/CVE-2026-51709.md)
  `CVE-2026-51709` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change WPS availability via sending a crafted POST request to /cgi-bin/…](https://agentprime.io/advisories/CVE-2026-51708.md)
  `CVE-2026-51708` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWiFiMeshName function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rename mesh entries via sending a crafted POST request to /cgi-bin/cs…](https://agentprime.io/advisories/CVE-2026-51705.md)
  `CVE-2026-51705` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change device access control via sending a crafted POST request to…](https://agentprime.io/advisories/CVE-2026-51701.md)
  `CVE-2026-51701` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to degrade wireless behavior via sending a crafted POST request to /c…](https://agentprime.io/advisories/CVE-2026-51700.md)
  `CVE-2026-51700` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose an internal host via sending a crafted POST request to /cgi-bin/cste…](https://agentprime.io/advisories/CVE-2026-51699.md)
  `CVE-2026-51699` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter browsing policies via sending a crafted POST request to /cgi-…](https://agentprime.io/advisories/CVE-2026-51698.md)
  `CVE-2026-51698` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter IPTV service configuration via sending a crafted POST request to /cg…](https://agentprime.io/advisories/CVE-2026-51697.md)
  `CVE-2026-51697` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose internal services via sending a crafted POST request to /c…](https://agentprime.io/advisories/CVE-2026-51696.md)
  `CVE-2026-51696` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to weaken edge filtering via sending a crafted POST request to /cgi-bin/cs…](https://agentprime.io/advisories/CVE-2026-51693.md)
  `CVE-2026-51693` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to establish or weaken guest wireless access via sending a crafted POST…](https://agentprime.io/advisories/CVE-2026-51692.md)
  `CVE-2026-51692` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulate the upload or flash workflow via sending a crafted POST r…](https://agentprime.io/advisories/CVE-2026-51691.md)
  `CVE-2026-51691` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter upstream provisioning and connectivity via sending a crafted POST req…](https://agentprime.io/advisories/CVE-2026-51690.md)
  `CVE-2026-51690` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setUpgradeFW function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger firmware-upgrade workflow changes via sending a crafted POST req…](https://agentprime.io/advisories/CVE-2026-51689.md)
  `CVE-2026-51689` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to create or weaken guest wireless access via sending a crafted POST…](https://agentprime.io/advisories/CVE-2026-51687.md)
  `CVE-2026-51687` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure or disable wireless networks via sending a crafted POST re…](https://agentprime.io/advisories/CVE-2026-51686.md)
  `CVE-2026-51686` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the storage-related service state via sending a crafted POST requ…](https://agentprime.io/advisories/CVE-2026-51684.md)
  `CVE-2026-51684` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose WAN-side administration via sending a crafted POST request to /cg…](https://agentprime.io/advisories/CVE-2026-51681.md)
  `CVE-2026-51681` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify LED behavior via sending a crafted POST request to /cgi-bin/cstecgi.…](https://agentprime.io/advisories/CVE-2026-51680.md)
  `CVE-2026-51680` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the administrator account via sending a crafted POST request to…](https://agentprime.io/advisories/CVE-2026-51679.md)
  `CVE-2026-51679` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change UPnP service state via sending a crafted POST request to /cgi-bin/c…](https://agentprime.io/advisories/CVE-2026-51677.md)
  `CVE-2026-51677` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter access-device policies via sending a crafted POST request to…](https://agentprime.io/advisories/CVE-2026-51676.md)
  `CVE-2026-51676` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control
- [Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure uplink settings via sending a crafted POST request to /cgi-bi…](https://agentprime.io/advisories/CVE-2026-51675.md)
  `CVE-2026-51675` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA4LTMxVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi01MTY3NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA4LTMxVDEyOjE1OjEyLjE5MzAwMFoiLCJDVkUtMjAyNi04MjY5MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA4LTMxVDEyOjE1OjEyLjE5MzAwMFoiLCJDVkUtMjAyNi04MjY5MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.