# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Open Redirect in Armiya Information Technologies' Access Control System](https://agentprime.io/advisories/CVE-2026-8323.md)
  `CVE-2026-8323` · CVE record: Armiya Information Technologies Ltd. Co. Access Control System · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Open redirect
- [GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service](https://agentprime.io/advisories/CVE-2026-88285.md)
  `CVE-2026-88285` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay](https://agentprime.io/advisories/CVE-2026-88278.md)
  `CVE-2026-88278` · CVE record: GeoVision Inc. GV-LPCLPC2011/2211 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2](https://agentprime.io/advisories/CVE-2026-44950.md)
  `CVE-2026-44950` · CVE record: SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 and 4 more · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption
- [fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2](https://agentprime.io/advisories/CVE-2026-59679.md)
  `CVE-2026-59679` · CVE record: SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 and 4 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption
- [SQLi in Armiya Information Technologies' Access Control System](https://agentprime.io/advisories/CVE-2026-7188.md)
  `CVE-2026-7188` · CVE record: Armiya Information Technologies Ltd. Co. Access Control System · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: SQL injection
- [Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod](https://agentprime.io/advisories/CVE-2026-80351.md)
  `CVE-2026-80351` · CVE record: Apache Software Foundation Apache Camel K · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Code injection
- [Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects](https://agentprime.io/advisories/CVE-2026-80352.md)
  `CVE-2026-80352` · CVE record: Apache Software Foundation Apache Camel K · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Code injection
- [Apache FreeMarker template loading mechanism vulnerable to path traversal](https://agentprime.io/advisories/GHSA-27j2-h3m2-8237.md)
  `GHSA-27j2-h3m2-8237`, `CVE-2026-84939` · Maven `org.freemarker:freemarker`: affected `>=2.2.0, <2.3.35`, fixed in `2.3.35` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Path traversal
- [zipMoney(Zip Co) Payments Plugin for WooCommerce < 2.4.0 - Unauthenticated Arbitrary Option Deletion](https://agentprime.io/advisories/CVE-2026-78361.md)
  `CVE-2026-78361` · CVE record: Unknown zipMoney(Zip Co) Payments Plugin for WooCommerce · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link Validator](https://agentprime.io/advisories/CVE-2026-77770.md)
  `CVE-2026-77770` · CVE record: Unknown miniOrange 2FA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers](https://agentprime.io/advisories/CVE-2026-49364.md)
  `CVE-2026-49364` · CVE record: Apache Software Foundation Apache Artemis and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment](https://agentprime.io/advisories/CVE-2026-57967.md)
  `CVE-2026-57967` · CVE record: Apache Software Foundation Apache Artemis and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion](https://agentprime.io/advisories/CVE-2026-67593.md)
  `CVE-2026-67593` · CVE record: Apache Software Foundation Apache Artemis and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Velociraptor Required Permissions bypass by using client monitoring queries](https://agentprime.io/advisories/CVE-2026-19583.md)
  `CVE-2026-19583` · CVE record: Rapid7 Velociraptor · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter](https://agentprime.io/advisories/CVE-2026-18351.md)
  `CVE-2026-18351` · CVE record: addonsorg Drag and Drop File Upload for Elementor Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Unrestricted file upload
- [An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replann…](https://agentprime.io/advisories/CVE-2026-71640.md)
  `CVE-2026-71640` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-703
- [An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file](https://agentprime.io/advisories/CVE-2026-68006.md)
  `CVE-2026-68006` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: HTTP request smuggling
- [An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/\<flowId> endpoint](https://agentprime.io/advisories/CVE-2026-52098.md)
  `CVE-2026-52098` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Code injection
- [Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php.](https://agentprime.io/advisories/CVE-2026-38626.md)
  `CVE-2026-38626` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: SQL injection
- [Behavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflow](https://agentprime.io/advisories/CVE-2026-87931.md)
  `CVE-2026-87931` · CVE record: Behavioral Technology Group Pavlok Behavioral Conditioning Wearable · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis](https://agentprime.io/advisories/CVE-2026-88069.md)
  `CVE-2026-88069` · CVE record: pandora-analysis pandora · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Path traversal
- [Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server](https://agentprime.io/advisories/CVE-2026-87911.md)
  `CVE-2026-87911` · CVE record: AWS AWS Labs postgres MCP Server · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection, CWE-184
- [NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover](https://agentprime.io/advisories/CVE-2026-54694.md)
  `CVE-2026-54694` · CVE record: NationalSecurityAgency skills-service · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site scripting (XSS), CWE-20, CWE-116, CWE-183
- [MaxSite CMS through 109.6 PHP Object Injection via ci_session](https://agentprime.io/advisories/CVE-2026-87930.md)
  `CVE-2026-87930` · CVE record: MaxSite MaxSite CMS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Insecure deserialization
- [MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key](https://agentprime.io/advisories/CVE-2026-87929.md)
  `CVE-2026-87929` · CVE record: MaxSite MaxSite CMS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Hard-coded credentials
- [SQL injection in WebPros cPanel](https://agentprime.io/advisories/CVE-2026-67401.md)
  `CVE-2026-67401` · CVE record: WebPros cPanel · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: SQL injection
- [Missing authorization in Sage AR Automation](https://agentprime.io/advisories/CVE-2026-68484.md)
  `CVE-2026-68484` · CVE record: Sage Sage AR Automation · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Insecure direct object reference in Sage AR Automation](https://agentprime.io/advisories/CVE-2026-67403.md)
  `CVE-2026-67403` · CVE record: Sage Sage AR Automation · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessage](https://agentprime.io/advisories/CVE-2026-22590.md)
  `CVE-2026-22590` · CVE record: eProsima Fast-DDS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding](https://agentprime.io/advisories/CVE-2026-85103.md)
  `CVE-2026-85103` · CVE record: checkpoint Quantum Security Gateway and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Improper Certificate Validation in Quantum Security Gateway](https://agentprime.io/advisories/CVE-2026-85102.md)
  `CVE-2026-85102` · CVE record: checkpoint Quantum Security Gateway · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.54 · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Insufficient verification of data authenticity in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80172.md)
  `CVE-2026-80172` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-345
- [Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password](https://agentprime.io/advisories/CVE-2026-87806.md)
  `CVE-2026-87806` · CVE record: parse-community parse-server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [KGUARD DVR unauthenticated remote command execution vulnerability](https://agentprime.io/advisories/CVE-2026-87827.md)
  `CVE-2026-87827` · CVE record: KGUARD KGUARD_firmware · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-1188
- [Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)](https://agentprime.io/advisories/CVE-2026-41871.md)
  `CVE-2026-41871` · CVE record: Apache Software Foundation Apache Nutch · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Code injection, Broken access control
- [Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)](https://agentprime.io/advisories/CVE-2026-41869.md)
  `CVE-2026-41869` · CVE record: Apache Software Foundation Apache Nutch · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service, Broken access control
- [Apache Impala: SAML authentication bypass via forged bearer token](https://agentprime.io/advisories/CVE-2026-56207.md)
  `CVE-2026-56207` · CVE record: Apache Software Foundation Apache Impala · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Unauthenticated Remote Code Execution in Akana API Platform](https://agentprime.io/advisories/CVE-2026-85978.md)
  `CVE-2026-85978` · CVE record: Perforce Akana · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Code injection, Broken access control, CWE-41
- [Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module](https://agentprime.io/advisories/CVE-2026-16272.md)
  `CVE-2026-16272` · CVE record: PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-348
- [Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist](https://agentprime.io/advisories/CVE-2026-79696.md)
  `CVE-2026-79696` · CVE record: Google Cloud Agent Development Kit (ADK) for Python · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-184
- [Use after free in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21102.md)
  `CVE-2026-21102` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Heap-based buffer overflow in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21096.md)
  `CVE-2026-21096` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Heap-based buffer overflow in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21095.md)
  `CVE-2026-21095` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-87448.md)
  `CVE-2026-87448` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Server-side request forgery in Google Chrome](https://agentprime.io/advisories/CVE-2026-87595.md)
  `CVE-2026-87595` · CVE record: Google Chrome · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-87634.md)
  `CVE-2026-87634` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-87609.md)
  `CVE-2026-87609` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-87526.md)
  `CVE-2026-87526` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-87455.md)
  `CVE-2026-87455` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-87638.md)
  `CVE-2026-87638` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Type confusion in Google Chrome](https://agentprime.io/advisories/CVE-2026-87528.md)
  `CVE-2026-87528` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Google Chrome: Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36…](https://agentprime.io/advisories/CVE-2026-87470.md)
  `CVE-2026-87470` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-1284
- [Google Chrome: Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a…](https://agentprime.io/advisories/CVE-2026-87529.md)
  `CVE-2026-87529` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-197
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-87637.md)
  `CVE-2026-87637` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-87494.md)
  `CVE-2026-87494` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-87643.md)
  `CVE-2026-87643` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Google Chrome: Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36…](https://agentprime.io/advisories/CVE-2026-87613.md)
  `CVE-2026-87613` · CVE record: Google Chrome · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-706
- [Google Chrome: Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36…](https://agentprime.io/advisories/CVE-2026-87547.md)
  `CVE-2026-87547` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-706
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-87491.md)
  `CVE-2026-87491` · CVE record: Google Chrome · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA5LTA5VDAwOjA5OjM4LjQxOTAwMFoiLCJDVkUtMjAyNi04NzQ5MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTA5LTEwVDA5OjU5OjQ3LjAyMjAwMFoiLCJDVkUtMjAyNi03ODA4MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTA5LTEwVDA5OjU5OjQ3LjAyMjAwMFoiLCJDVkUtMjAyNi03ODA4MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.