# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-106211.md)
  `CVE-2026-106211` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-106227.md)
  `CVE-2026-106227` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-106298.md)
  `CVE-2026-106298` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-106281.md)
  `CVE-2026-106281` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106323.md)
  `CVE-2026-106323` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-106419.md)
  `CVE-2026-106419` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-106239.md)
  `CVE-2026-106239` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-102322.md)
  `CVE-2026-102322` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-106358.md)
  `CVE-2026-106358` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-106197.md)
  `CVE-2026-106197` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-106382.md)
  `CVE-2026-106382` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-55330.md)
  `CVE-2026-55330` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Path traversal in Dell System Update](https://agentprime.io/advisories/CVE-2026-86360.md)
  `CVE-2026-86360` · CVE record: Dell System Update · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Path traversal
- [SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE](https://agentprime.io/advisories/CVE-2026-104070.md)
  `CVE-2026-104070` · CVE record: SPIP SPIP Crayons Plugin · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Payload: Field access control bypass on auth collections](https://agentprime.io/advisories/CVE-2026-105851.md)
  `CVE-2026-105851` · CVE record: payloadcms payload · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Payload: Prototype pollution in Payload Import Export plugin](https://agentprime.io/advisories/GHSA-qf28-8hc6-vwrp.md)
  `GHSA-qf28-8hc6-vwrp`, `CVE-2026-105844` · npm `@payloadcms/plugin-import-export`: affected `>=3.0.0, <3.88.0 || >=4.0.0-canary.0, <4.0.0-canary.27`, fixed in `3.88.0`, `4.0.0-canary.27` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Prototype pollution
- [Payload: SQL Injection in SQLite and Postgres](https://agentprime.io/advisories/GHSA-v49j-62m6-pgrr.md)
  `GHSA-v49j-62m6-pgrr`, `CVE-2026-105845` · npm `payload`: affected `>=3.0.0, <3.88.0 || >=4.0.0-canary.0, <4.0.0-canary.27`, fixed in `3.88.0`, `4.0.0-canary.27` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL](https://agentprime.io/advisories/GHSA-w5f4-fx9m-m4q7.md)
  `GHSA-w5f4-fx9m-m4q7`, `CVE-2026-105794` · NuGet `Microsoft.Native.Quic.MsQuic.OpenSSL`: affected `<2.4.20 || >=2.5.0, <2.5.11 || >=2.6.0, <2.6.1`, fixed in `2.4.20`, `2.5.11`, `2.6.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Weak cryptography or TLS
- [Template injection in Dell Container Storage Modules](https://agentprime.io/advisories/CVE-2026-67273.md)
  `CVE-2026-67273` · CVE record: Dell Container Storage Modules · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Code injection
- [Hard-coded credentials in Dell Container Storage Modules](https://agentprime.io/advisories/CVE-2026-61421.md)
  `CVE-2026-61421` · CVE record: Dell Container Storage Modules · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Hard-coded credentials
- [Hard-coded credentials in Dell Container Storage Modules](https://agentprime.io/advisories/CVE-2026-54472.md)
  `CVE-2026-54472` · CVE record: Dell Container Storage Modules · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Hard-coded credentials
- [Improper privilege management in Dell Container Storage Modules (CSM)](https://agentprime.io/advisories/CVE-2026-67269.md)
  `CVE-2026-67269` · CVE record: Dell Container Storage Modules (CSM) · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Privilege escalation
- [Missing authentication in Dell Container Storage Modules](https://agentprime.io/advisories/CVE-2026-63692.md)
  `CVE-2026-63692` · CVE record: Dell Container Storage Modules · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Authentication bypass
- [Missing authentication in Dell Container Storage Modules (CSM)](https://agentprime.io/advisories/CVE-2026-63688.md)
  `CVE-2026-63688` · CVE record: Dell Dell Container Storage Modules (CSM) · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Authentication bypass
- [Microsoft UFO: Authenticated Android shell command injection in Mobile MCP \`press_key\`](https://agentprime.io/advisories/CVE-2026-105793.md)
  `CVE-2026-105793` · CVE record: microsoft UFO · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service](https://agentprime.io/advisories/CVE-2026-106037.md)
  `CVE-2026-106037` · CVE record: kvcache-ai Mooncake · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Authentication bypass
- [OS command injection in Progress Software Autonomous REST Connector GenAI Agents](https://agentprime.io/advisories/CVE-2026-91140.md)
  `CVE-2026-91140` · CVE record: Progress Software Autonomous REST Connector GenAI Agents · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [shell-quote: \`quote()\` command injection via a line terminator in a token after a \`{ comment }\` token](https://agentprime.io/advisories/GHSA-pqg4-j6r4-53mv.md)
  `GHSA-pqg4-j6r4-53mv`, `CVE-2026-102422` · npm `shell-quote`: affected `>=1.8.4, <1.11.0`, fixed in `1.11.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation](https://agentprime.io/advisories/GHSA-8qpj-27x8-pwpq.md)
  `GHSA-8qpj-27x8-pwpq`, `CVE-2026-10561`, `PYSEC-2026-4231` · PyPI `langflow`: affected `<1.10.1`, fixed in `1.10.1` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Code injection, Privilege escalation
- [PLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify-totp Endpoint](https://agentprime.io/advisories/CVE-2026-105835.md)
  `CVE-2026-105835` · CVE record: planka planka · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Authentication bypass
- [Mitigation bypass in the File Handling component](https://agentprime.io/advisories/CVE-2026-106016.md)
  `CVE-2026-106016` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-693
- [Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache](https://agentprime.io/advisories/CVE-2026-82531.md)
  `CVE-2026-82531` · CVE record: smarty-php smarty · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Code injection
- [RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access](https://agentprime.io/advisories/CVE-2026-98365.md)
  `CVE-2026-98365` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026
- [RDMA/siw: Bound fragmented header copies by the remaining length](https://agentprime.io/advisories/CVE-2026-98323.md)
  `CVE-2026-98323` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026
- [WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-42417.md)
  `CVE-2026-42417` · CVE record: reputeinfosystems ARMember Premium · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-42415.md)
  `CVE-2026-42415` · CVE record: p-themes Porto Theme - Functionality · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-41555.md)
  `CVE-2026-41555` · CVE record: Weblizar – WordPress Themes & Plugin Newsletter Subscription Form – User Subscriptions Form, Capture Email · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-39797.md)
  `CVE-2026-39797` · CVE record: Data443 Risk Mitigation, Inc. GDPR Framework By Data443 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Insecure deserialization
- [WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-39795.md)
  `CVE-2026-39795` · CVE record: brewlabs SendPress Newsletters · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-39785.md)
  `CVE-2026-39785` · CVE record: Serhii Pasyuk Gmedia Photo Gallery · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-39773.md)
  `CVE-2026-39773` · CVE record: AmentoTech Doctreat Core · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Privilege escalation
- [WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-39770.md)
  `CVE-2026-39770` · CVE record: AmentoTech Doctreat · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Unrestricted file upload
- [WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-39764.md)
  `CVE-2026-39764` · CVE record: RadiusTheme Radius Booking — Booking Calendar for Appointments \&amp; Services · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-39761.md)
  `CVE-2026-39761` · CVE record: eLightUp Meta Box AIO · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Privilege escalation
- [WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-39759.md)
  `CVE-2026-39759` · CVE record: AmentoTech Workreap Core · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Unrestricted file upload
- [WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-39757.md)
  `CVE-2026-39757` · CVE record: AmentoTech Taskbot · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Unrestricted file upload
- [WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-39755.md)
  `CVE-2026-39755` · CVE record: revmakx WP Duplicate · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Unrestricted file upload
- [WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-39753.md)
  `CVE-2026-39753` · CVE record: AmentoTech Taskbot · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Privilege escalation
- [WordPress Booknetic plugin < 5.10.3 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-39746.md)
  `CVE-2026-39746` · CVE record: Booknetic Booknetic · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-32579.md)
  `CVE-2026-32579` · CVE record: kognetiks Kognetiks Chatbot for WordPress · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Unrestricted file upload
- [WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-32568.md)
  `CVE-2026-32568` · CVE record: JMAPlugins WooCommerce Designer Pro · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Code injection
- [WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-32557.md)
  `CVE-2026-32557` · CVE record: BookingWP WooCommerce Appointments · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: SQL injection
- [Information Disclosure Vulnerability in Schmooze dating mobile Application](https://agentprime.io/advisories/CVE-2026-85153.md)
  `CVE-2026-85153` · CVE record: Schmooze Schmooze dating mobile Application · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Hard-coded credentials
- [Tenda AC5 Wifi setWifi stack-based overflow](https://agentprime.io/advisories/CVE-2026-105778.md)
  `CVE-2026-105778` · CVE record: Tenda AC5 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Missing authentication for critical function in the aas-edge-client REST API](https://agentprime.io/advisories/CVE-2026-94293.md)
  `CVE-2026-94293` · CVE record: Murrelektronik Software AAS Edge Client all versions · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Authentication bypass
- [TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection](https://agentprime.io/advisories/CVE-2026-105484.md)
  `CVE-2026-105484` · CVE record: TOTOLINK X6000R · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.](https://agentprime.io/advisories/CVE-2026-77178.md)
  `CVE-2026-77178` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field.](https://agentprime.io/advisories/CVE-2025-71383.md)
  `CVE-2025-71383` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-20
- [simple-git: \`VISUAL\` editor environment variable is omitted from unsafe editor detection](https://agentprime.io/advisories/GHSA-v5rq-49vh-5v5c.md)
  `GHSA-v5rq-49vh-5v5c`, `CVE-2026-102829` · npm `@simple-git/argv-parser`: affected `<2.0.1`, fixed in `2.0.1` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection, CWE-184
- [simple-git unsafe-operation guard does not block trailer command configuration](https://agentprime.io/advisories/GHSA-x6jw-m9v5-85vh.md)
  `GHSA-x6jw-m9v5-85vh`, `CVE-2026-102828` · npm `simple-git`: affected `>=3.15.0, <4.0.1`, fixed in `4.0.1` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection, CWE-184

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTEwLTA1VDIzOjQ4OjE0LjAwMDAwMFoiLCJHSFNBLXg2anctbTl2NS04NXZoIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTEwLTA2VDE4OjQxOjExLjgyNDAwMFoiLCJDVkUtMjAyNi0xMDYzMjkiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTEwLTA2VDE4OjQxOjExLjgyNDAwMFoiLCJDVkUtMjAyNi0xMDYzMjkiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.