# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request](https://agentprime.io/advisories/CVE-2026-54752.md)
  `CVE-2026-54752` · CVE record: netbox-community devicetype-library · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Insecure deserialization, CWE-829
- [SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)](https://agentprime.io/advisories/CVE-2026-54627.md)
  `CVE-2026-54627` · CVE record: HappySeaFox sail · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Memory corruption
- [SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)](https://agentprime.io/advisories/CVE-2026-54626.md)
  `CVE-2026-54626` · CVE record: HappySeaFox sail · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Memory corruption
- [Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user](https://agentprime.io/advisories/CVE-2026-54618.md)
  `CVE-2026-54618` · CVE record: jimprosser obsidian-web-mcp · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, Hard-coded credentials, Open redirect
- [Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python](https://agentprime.io/advisories/CVE-2026-92943.md)
  `CVE-2026-92943` · CVE record: AWS AWSIoTPythonSDK · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults](https://agentprime.io/advisories/CVE-2026-54053.md)
  `CVE-2026-54053` · CVE record: brufdev many-notes · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Path traversal
- [RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr](https://agentprime.io/advisories/GHSA-c5pq-fr2g-9jpf.md)
  `GHSA-c5pq-fr2g-9jpf`, `CVE-2026-77411`, `GO-2026-6496` · Go `github.com/rabbitmq/amqp091-go`: affected `<1.13.0`, fixed in `1.13.0` · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-754
- [RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow](https://agentprime.io/advisories/GHSA-j497-x9hr-x34x.md)
  `GHSA-j497-x9hr-x34x`, `CVE-2026-77408`, `GO-2026-6498` · Go `github.com/rabbitmq/amqp091-go`: affected `<1.13.0`, fixed in `1.13.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Memory corruption
- [RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser](https://agentprime.io/advisories/GHSA-33mj-cw25-m34h.md)
  `GHSA-33mj-cw25-m34h`, `CVE-2026-77405`, `GO-2026-6492` · Go `github.com/rabbitmq/amqp091-go`: affected `<1.13.0`, fixed in `1.13.0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-316
- [xfrm: Fix skb double-free in xfrm_dev_direct_output()](https://agentprime.io/advisories/CVE-2026-92489.md)
  `CVE-2026-92489` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [IB/isert: reject PDUs declaring more data than was received](https://agentprime.io/advisories/CVE-2026-90414.md)
  `CVE-2026-90414` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [IB/isert: reject login PDUs declaring more data than was received](https://agentprime.io/advisories/CVE-2026-90413.md)
  `CVE-2026-90413` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE](https://agentprime.io/advisories/CVE-2026-90235.md)
  `CVE-2026-90235` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()](https://agentprime.io/advisories/CVE-2026-90230.md)
  `CVE-2026-90230` · CVE record: Linux Linux · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [smb: smbdirect: free completion queues with ib_free_cq()](https://agentprime.io/advisories/CVE-2026-90173.md)
  `CVE-2026-90173` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [NFSv4: remove callback IDR entry on client allocation failure](https://agentprime.io/advisories/CVE-2026-90151.md)
  `CVE-2026-90151` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [inetpeer: randomize RB-tree node comparison using SipHash](https://agentprime.io/advisories/CVE-2026-90110.md)
  `CVE-2026-90110` · CVE record: Linux Linux · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [NFSv4.1: zero referring call lists before decoding](https://agentprime.io/advisories/CVE-2026-90104.md)
  `CVE-2026-90104` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026
- [pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode](https://agentprime.io/advisories/CVE-2026-86863.md)
  `CVE-2026-86863` · CVE record: pgadmin.org pgAdmin 4 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, CWE-807
- [dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover](https://agentprime.io/advisories/GHSA-73j9-m294-fvv9.md)
  `GHSA-73j9-m294-fvv9`, `CVE-2026-91039`, `EEF-CVE-2026-91039` · Hex `ash_authentication`: affected `>=5.0.0-rc.10, <5.0.0-rc.14`, fixed in `5.0.0-rc.14` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key](https://agentprime.io/advisories/CVE-2026-76834.md)
  `CVE-2026-76834` · CVE record: b2evolution b2evolution CMS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Insecure deserialization
- [Marten's LINQ provider has SQL injection via unescaped string literals](https://agentprime.io/advisories/GHSA-rfx3-98h7-v3xp.md)
  `GHSA-rfx3-98h7-v3xp`, `CVE-2026-75513` · NuGet `Marten`: affected `>=7.0.0, <8.37.4 || >=9.0.0, <9.13.0`, fixed in `8.37.4`, `9.13.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: SQL injection
- [Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification](https://agentprime.io/advisories/GHSA-6j36-r6pr-59x4.md)
  `GHSA-6j36-r6pr-59x4`, `CVE-2026-63472` · npm `@vendure/core`: affected `<3.7.0`, fixed in `3.7.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [OAuth2 sign-in attached to an existing account without an email comparison in AshAuthentication](https://agentprime.io/advisories/GHSA-wc6x-276q-jrf9.md)
  `GHSA-wc6x-276q-jrf9`, `CVE-2026-88952`, `EEF-CVE-2026-88952` · Hex `ash_authentication`: affected `>=4.14.0, <4.15.0 || >=5.0.0-rc.10, <5.0.0-rc.14`, fixed in `4.15.0`, `5.0.0-rc.14` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability](https://agentprime.io/advisories/CVE-2026-62108.md)
  `CVE-2026-62108` · CVE record: miniOrange Headless Single Sign On · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [WordPress Migratico Lite plugin <= 2.6.8 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-62104.md)
  `CVE-2026-62104` · CVE record: superweby Migratico Lite · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Code injection
- [WordPress EduAdmin Booking plugin <= 5.4.2 - Broken Authentication vulnerability](https://agentprime.io/advisories/CVE-2026-62101.md)
  `CVE-2026-62101` · CVE record: Chris Åkerfeldt Wendel EduAdmin Booking · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [\`require_confirmed_with\` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication](https://agentprime.io/advisories/GHSA-fc47-6pgw-wh22.md)
  `GHSA-fc47-6pgw-wh22`, `CVE-2026-85500`, `EEF-CVE-2026-85500` · Hex `ash_authentication`: affected `>=4.3.8, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14`, fixed in `4.15.0`, `5.0.0-rc.14` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-305
- [Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix](https://agentprime.io/advisories/GHSA-m6x4-4gvp-xwjr.md)
  `GHSA-m6x4-4gvp-xwjr`, `CVE-2026-86533`, `EEF-CVE-2026-86533` · Hex `ash_authentication` and 1 more: affected `>=4.9.1, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14`, fixed in `4.15.0`, `5.0.0-rc.14` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [Magic link single-use tokens replayable via TOCTOU race in AshAuthentication](https://agentprime.io/advisories/GHSA-23gr-vcp4-r27q.md)
  `GHSA-23gr-vcp4-r27q`, `CVE-2026-82761`, `EEF-CVE-2026-82761` · Hex `ash_authentication`: affected `>=3.9.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14`, fixed in `4.15.0`, `5.0.0-rc.14` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Race condition
- [rcourtman Pulse Quick Security Setup quick-setup fmt.Sprintf input validation](https://agentprime.io/advisories/CVE-2026-92860.md)
  `CVE-2026-92860` · CVE record: rcourtman Pulse · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-20
- [Stack-based buffer overflow in FatPipe Networks MPVPN and others](https://agentprime.io/advisories/CVE-2026-90823.md)
  `CVE-2026-90823` · CVE record: FatPipe Networks MPVPN and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Memory corruption
- [OS command injection in FatPipe Networks MPVPN and others](https://agentprime.io/advisories/CVE-2026-90822.md)
  `CVE-2026-90822` · CVE record: FatPipe Networks MPVPN and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [AVideo Weak PRNG Activation Code Authentication Bypass](https://agentprime.io/advisories/CVE-2026-92913.md)
  `CVE-2026-92913` · CVE record: WWBN AVideo · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting](https://agentprime.io/advisories/CVE-2026-15688.md)
  `CVE-2026-15688` · CVE record: Mitsubishi Electric Corporation GX Works3 and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [wpShopGermany IT-RECHT KANZLEI < 2.4 - Unauthenticated RCE via Predictable API Token](https://agentprime.io/advisories/CVE-2026-88795.md)
  `CVE-2026-88795` · CVE record: Unknown wpShopGermany IT-RECHT KANZLEI · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Code injection
- [Login with QR <= 1.0.0 - Unauthenticated Authentication Bypass via 'autologin_code' Parameter](https://agentprime.io/advisories/CVE-2026-86710.md)
  `CVE-2026-86710` · CVE record: Unknown Login with QR · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [The Pressengine <= 1.0 - Unauthenticated Authentication Bypass](https://agentprime.io/advisories/CVE-2026-86709.md)
  `CVE-2026-86709` · CVE record: Unknown The Pressengine · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [Private Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter](https://agentprime.io/advisories/CVE-2026-86707.md)
  `CVE-2026-86707` · CVE record: Unknown Private Feed Key · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload](https://agentprime.io/advisories/CVE-2026-87796.md)
  `CVE-2026-87796` · CVE record: sh1zen Multi Uploader for Gravity Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Unrestricted file upload
- [In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.](https://agentprime.io/advisories/CVE-2025-55787.md)
  `CVE-2025-55787` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: SQL injection
- [djust has an authorization bypass on the WebSocket/SSE mount path](https://agentprime.io/advisories/GHSA-xhhm-f6hp-2qwj.md)
  `GHSA-xhhm-f6hp-2qwj`, `CVE-2026-61594`, `PYSEC-2026-4047` · PyPI `djust`: affected `<1.0.7`, fixed in `1.0.7` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass, Broken access control
- [WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash](https://agentprime.io/advisories/CVE-2026-92578.md)
  `CVE-2026-92578` · CVE record: WWBN AVideo · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass
- [HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool](https://agentprime.io/advisories/CVE-2026-92576.md)
  `CVE-2026-92576` · CVE record: HKUDS nanobot · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matching](https://agentprime.io/advisories/CVE-2026-92812.md)
  `CVE-2026-92812` · CVE record: decaporg decap-cms · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal
- [UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard](https://agentprime.io/advisories/CVE-2026-92805.md)
  `CVE-2026-92805` · CVE record: uvdesk community-skeleton · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass
- [Feast through 0.66.0 Authentication Bypass via Unverified Token](https://agentprime.io/advisories/CVE-2026-92787.md)
  `CVE-2026-92787` · CVE record: feast-dev feast · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Hard-coded credentials
- [Angel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary Classes](https://agentprime.io/advisories/CVE-2026-92785.md)
  `CVE-2026-92785` · CVE record: Angel-ML angel · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Insecure deserialization
- [SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret](https://agentprime.io/advisories/CVE-2026-92749.md)
  `CVE-2026-92749` · CVE record: chaitin SafeLine · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20284.md)
  `CVE-2026-20284` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Other injection
- [Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20332.md)
  `CVE-2026-20332` · CVE record: Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and 2 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control
- [Cisco Identity Services Engine Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-76460.md)
  `CVE-2026-76460` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.76 · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-648
- [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20176.md)
  `CVE-2026-20176` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection
- [Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20341.md)
  `CVE-2026-20341` · CVE record: Cisco Cisco Secure Firewall Management Center (FMC) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Insecure deserialization
- [Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20242.md)
  `CVE-2026-20242` · CVE record: Cisco Cisco Secure Firewall Management Center (FMC) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Insecure deserialization
- [Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20237.md)
  `CVE-2026-20237` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-20
- [Cisco ISE API Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-76423.md)
  `CVE-2026-76423` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass
- [Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20130.md)
  `CVE-2026-20130` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Other injection
- [Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20192.md)
  `CVE-2026-20192` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control
- [Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability](https://agentprime.io/advisories/CVE-2026-20324.md)
  `CVE-2026-20324` · CVE record: Cisco Cisco Secure Firewall Management Center (FMC) · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA5LTE2VDIwOjA2OjUyLjY4MzAwMFoiLCJDVkUtMjAyNi0yMDMyNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA5LTE3VDIwOjA3OjI0LjYzMTAwMFoiLCJDVkUtMjAyNi01NDQ2MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA5LTE3VDIwOjA3OjI0LjYzMTAwMFoiLCJDVkUtMjAyNi01NDQ2MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.