# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Windows HTTP Print Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69769.md)
  `CVE-2026-69769` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Shell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69829.md)
  `CVE-2026-69829` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69845.md)
  `CVE-2026-69845` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-20
- [Microsoft Standard XPS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69824.md)
  `CVE-2026-69824` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows RNDIS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69768.md)
  `CVE-2026-69768` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Direct Show Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69715.md)
  `CVE-2026-69715` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft Windows PDF Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69586.md)
  `CVE-2026-69586` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Event Logging Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69493.md)
  `CVE-2026-69493` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-68839.md)
  `CVE-2026-68839` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-20
- [Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85880.md)
  `CVE-2026-85880` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Visual Studio Code Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-81376.md)
  `CVE-2026-81376` · CVE record: Microsoft Visual Studio Code · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693, CWE-1023
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-65669.md)
  `CVE-2026-65669` · CVE record: Microsoft SQL Server Management Studio 22 · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Other injection
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67643.md)
  `CVE-2026-67643` · CVE record: Microsoft Microsoft SQL Server 2022 (CU 26) and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67636.md)
  `CVE-2026-67636` · CVE record: Microsoft Microsoft SQL Server 2019 (CU 32) and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft Office Outlook Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-78509.md)
  `CVE-2026-78509` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67378.md)
  `CVE-2026-67378` · CVE record: Microsoft Microsoft SQL Server 2019 (CU 32) and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-77493.md)
  `CVE-2026-77493` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Message Queuing Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69579.md)
  `CVE-2026-69579` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Netlogon Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72982.md)
  `CVE-2026-72982` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Internet Connection Sharing (ICS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72983.md)
  `CVE-2026-72983` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72979.md)
  `CVE-2026-72979` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69641.md)
  `CVE-2026-69641` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-69356.md)
  `CVE-2026-69356` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69730.md)
  `CVE-2026-69730` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [RPC Runtime Library Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69819.md)
  `CVE-2026-69819` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69525.md)
  `CVE-2026-69525` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Compressed Folder Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69496.md)
  `CVE-2026-69496` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69463.md)
  `CVE-2026-69463` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft DirectMusic Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69491.md)
  `CVE-2026-69491` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Telnet Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69431.md)
  `CVE-2026-69431` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69408.md)
  `CVE-2026-69408` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69276.md)
  `CVE-2026-69276` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-67631.md)
  `CVE-2026-67631` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Entra ID Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83941.md)
  `CVE-2026-83941` · CVE record: Microsoft Microsoft Entra · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass](https://agentprime.io/advisories/CVE-2026-75156.md)
  `CVE-2026-75156` · CVE record: Apache Software Foundation Apache Airflow FAB provider · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-346
- [NLTK: Allowlisted pickle loaders still permit code execution in current source](https://agentprime.io/advisories/GHSA-x99w-6fgc-pmfw.md)
  `GHSA-x99w-6fgc-pmfw`, `CVE-2026-79657`, `PYSEC-2026-3735` · PyPI `nltk`: affected `<3.10.3`, fixed in `3.10.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Insecure deserialization, CWE-693
- [NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution](https://agentprime.io/advisories/GHSA-rhp5-r9x4-f5g2.md)
  `GHSA-rhp5-r9x4-f5g2`, `CVE-2026-78683`, `PYSEC-2026-3734` · PyPI `nltk`: affected `<3.10.0`, fixed in `3.10.0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Insecure deserialization
- [Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup](https://agentprime.io/advisories/CVE-2026-82067.md)
  `CVE-2026-82067` · CVE record: MongoDB MongoDB Server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-178
- [Bifrost Unauthorized Channel Commission Attribution Allows Commission Diversion](https://agentprime.io/advisories/CVE-2026-86840.md)
  `CVE-2026-86840` · CVE record: Bitfrost.io Bifrost · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Snipe-IT before 8.7.0 CSS Injection via Custom CSS](https://agentprime.io/advisories/CVE-2026-86738.md)
  `CVE-2026-86738` · CVE record: grokability snipe-it · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize](https://agentprime.io/advisories/CVE-2026-86729.md)
  `CVE-2026-86729` · CVE record: WWBN AVideo · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Missing authorization in Ivanti Neurons for ITSM](https://agentprime.io/advisories/CVE-2026-12647.md)
  `CVE-2026-12647` · CVE record: Ivanti Ivanti Neurons for ITSM · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Missing authorization in Ivanti Neurons for ITSM](https://agentprime.io/advisories/CVE-2026-12646.md)
  `CVE-2026-12646` · CVE record: Ivanti Ivanti Neurons for ITSM · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Missing authorization in Ivanti Neurons for ITSM](https://agentprime.io/advisories/CVE-2026-12645.md)
  `CVE-2026-12645` · CVE record: Ivanti Ivanti Neurons for ITSM · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Deserialization of untrusted data in Ivanti Neurons for ITSM](https://agentprime.io/advisories/CVE-2026-12650.md)
  `CVE-2026-12650` · CVE record: Ivanti Neurons for ITSM · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Insecure deserialization
- [Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint](https://agentprime.io/advisories/CVE-2026-61516.md)
  `CVE-2026-61516` · CVE record: Netis Systems NX10 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Hard-coded credentials
- [Deserialization of untrusted data in Ivanti Neurons for ITSM](https://agentprime.io/advisories/CVE-2026-12745.md)
  `CVE-2026-12745` · CVE record: Ivanti Neurons for ITSM · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Insecure deserialization
- [Deserialization of untrusted data in Ivanti Neurons for ITSM](https://agentprime.io/advisories/CVE-2026-12744.md)
  `CVE-2026-12744` · CVE record: Ivanti Neurons for ITSM · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Insecure deserialization
- [XenForo < 2.3.13 Refresh Token Replay via Expired Access Token](https://agentprime.io/advisories/CVE-2026-73312.md)
  `CVE-2026-73312` · CVE record: XenForo XenForo · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [XenForo < 2.3.13 OAuth2 Authorization Code Reuse](https://agentprime.io/advisories/CVE-2026-73311.md)
  `CVE-2026-73311` · CVE record: XenForo XenForo · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpoint](https://agentprime.io/advisories/CVE-2026-73309.md)
  `CVE-2026-73309` · CVE record: XenForo XenForo · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-697
- [Command Center API Authentication Bypass](https://agentprime.io/advisories/CVE-2026-77089.md)
  `CVE-2026-77089` · CVE record: Commvault Commvault Cloud · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificate issuance to namespace edit users](https://agentprime.io/advisories/CVE-2026-78234.md)
  `CVE-2026-78234` · CVE record: Red Hat Red Hat build of Apache Camel - HawtIO 4 · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [Command Argument Injection Vulnerability in Cosminexus Component Container](https://agentprime.io/advisories/CVE-2026-71377.md)
  `CVE-2026-71377` · CVE record: Hitachi Cosminexus Component Container · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Path traversal in Siemens SIMOVE Fleetmanager V3.1 and others](https://agentprime.io/advisories/CVE-2026-67367.md)
  `CVE-2026-67367` · CVE record: Siemens SIMOVE Fleetmanager V3.1 and 4 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal
- [Improper input validation in Siemens Reyrolle 7SR5](https://agentprime.io/advisories/CVE-2026-62647.md)
  `CVE-2026-62647` · CVE record: Siemens Reyrolle 7SR5 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-20
- [A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).](https://agentprime.io/advisories/CVE-2026-62646.md)
  `CVE-2026-62646` · CVE record: Siemens Reyrolle 7SR5 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-331
- [Missing authentication in Siemens Reyrolle 7SR5](https://agentprime.io/advisories/CVE-2026-62645.md)
  `CVE-2026-62645` · CVE record: Siemens Reyrolle 7SR5 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [OS Command Injection Vulnerability in Cosminexus Component Container](https://agentprime.io/advisories/CVE-2026-71376.md)
  `CVE-2026-71376` · CVE record: Hitachi Cosminexus Component Container · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Command injection
- [Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container](https://agentprime.io/advisories/CVE-2026-71374.md)
  `CVE-2026-71374` · CVE record: Hitachi Cosminexus Component Container · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Insecure deserialization

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA5LTA4VDA3OjQ3OjI4LjY0ODAwMFoiLCJDVkUtMjAyNi03MTM3NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA5LTA4VDE3OjE3OjE4Ljg0NzAwMFoiLCJDVkUtMjAyNi02OTkxMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA5LTA4VDE3OjE3OjE4Ljg0NzAwMFoiLCJDVkUtMjAyNi02OTkxMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.