# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [CVE-2026-104056](https://agentprime.io/advisories/CVE-2026-104056.md)
  `CVE-2026-104056` · CVE record: Authlib Authlib · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-345, CWE-346, CWE-829
- [DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)](https://agentprime.io/advisories/CVE-2026-55083.md)
  `CVE-2026-55083` · CVE record: dhis2 dhis2-core · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Insecure deserialization
- [SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route](https://agentprime.io/advisories/GHSA-9cqf-hhrq-7v45.md)
  `GHSA-9cqf-hhrq-7v45`, `CVE-2026-73608`, `GO-2026-6632` · Go `github.com/siyuan-note/siyuan/kernel`: affected `>=0.0.0-20260726161145-9b8e8956f997, <0.0.0-20260812083335-251596fc0de2`, fixed in `0.0.0-20260812083335-251596fc0de2` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [Foreman: excessive permissions for viewer role on preview](https://agentprime.io/advisories/CVE-2026-96659.md)
  `CVE-2026-96659` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Privilege escalation
- [Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function](https://agentprime.io/advisories/CVE-2026-59797.md)
  `CVE-2026-59797` · CVE record: Apache Software Foundation Apache HTTP Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Privilege escalation
- [WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access](https://agentprime.io/advisories/CVE-2026-13043.md)
  `CVE-2026-13043` · CVE record: WatchGuard Endpoint Security · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass, Hard-coded credentials
- [Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy](https://agentprime.io/advisories/CVE-2026-57941.md)
  `CVE-2026-57941` · CVE record: Apache Software Foundation Apache HTTP Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Memory corruption
- [Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}](https://agentprime.io/advisories/CVE-2026-56154.md)
  `CVE-2026-56154` · CVE record: Apache Software Foundation Apache HTTP Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Memory corruption
- [vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape](https://agentprime.io/advisories/GHSA-qhwx-74w5-xhxq.md)
  `GHSA-qhwx-74w5-xhxq`, `CVE-2026-92948` · npm `vm2`: affected `>=3.9.6, <3.11.7`, fixed in `3.11.7` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-693
- [vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts](https://agentprime.io/advisories/GHSA-jxxv-8r27-vm4p.md)
  `GHSA-jxxv-8r27-vm4p`, `CVE-2026-92950` · npm `vm2`: affected `<3.11.7`, fixed in `3.11.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-453, CWE-829, CWE-1188
- [vm2 exposes host HTTPS credentials and TLS traffic through globalAgent](https://agentprime.io/advisories/GHSA-h85j-hv3c-qfgq.md)
  `GHSA-h85j-hv3c-qfgq`, `CVE-2026-92940` · npm `vm2`: affected `>=3.11.3, <3.11.7`, fixed in `3.11.7` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Information disclosure
- [Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)](https://agentprime.io/advisories/CVE-2026-94620.md)
  `CVE-2026-94620` · CVE record: foundation50 classroom50 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package](https://agentprime.io/advisories/GHSA-c48m-32m9-vx93.md)
  `GHSA-c48m-32m9-vx93`, `CVE-2026-92951` · npm `vm2`: affected `<3.11.7`, fixed in `3.11.7` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control, CWE-706, CWE-829
- [vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process](https://agentprime.io/advisories/GHSA-8686-vhfx-7r3j.md)
  `GHSA-8686-vhfx-7r3j`, `CVE-2026-92957` · npm `vm2`: affected `<3.11.7`, fixed in `3.11.7` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Privilege escalation, Broken access control
- [vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE](https://agentprime.io/advisories/GHSA-8hr7-r645-pc6w.md)
  `GHSA-8hr7-r645-pc6w`, `CVE-2026-92935` · npm `vm2`: affected `>=3.11.4, <3.11.7`, fixed in `3.11.7` · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-913
- [vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection](https://agentprime.io/advisories/GHSA-647f-g98j-qq25.md)
  `GHSA-647f-g98j-qq25`, `CVE-2026-92937` · npm `vm2`: affected `>=3.11.6, <3.11.7`, fixed in `3.11.7` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Code injection, CWE-693
- [Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability](https://agentprime.io/advisories/CVE-2026-12627.md)
  `CVE-2026-12627` · CVE record: Fortra Fortra's Core Privileged Access Manager (BoKS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Memory corruption
- [vm2 allows a sandboxed plugin to execute native code through \`node:sqlite\`](https://agentprime.io/advisories/GHSA-6w8r-xxw2-g3hx.md)
  `GHSA-6w8r-xxw2-g3hx`, `CVE-2026-92938` · npm `vm2`: affected `>=3.11.3, <3.11.7`, fixed in `3.11.7` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-693
- [vm2 crypto builtin loads attacker native code through setEngine](https://agentprime.io/advisories/GHSA-46pr-c5wc-xffx.md)
  `GHSA-46pr-c5wc-xffx`, `CVE-2026-92939` · npm `vm2`: affected `>=3.11.3, <3.11.7`, fixed in `3.11.7` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-114
- [vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector](https://agentprime.io/advisories/GHSA-27g9-p43v-cw3v.md)
  `GHSA-27g9-p43v-cw3v`, `CVE-2026-92944` · npm `vm2`: affected `>=3.10.2, <3.11.7`, fixed in `3.11.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-693, CWE-913
- [vm2 NodeVM can replace the host process TLS trust store](https://agentprime.io/advisories/GHSA-98xx-8mx4-x7cm.md)
  `GHSA-98xx-8mx4-x7cm`, `CVE-2026-92941` · npm `vm2`: affected `>=3.11.3, <3.11.7`, fixed in `3.11.7` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env](https://agentprime.io/advisories/GHSA-67c8-pqhq-4rmx.md)
  `GHSA-67c8-pqhq-4rmx`, `CVE-2026-102992` · npm `piscina`: affected `<4.9.4 || >=5.0.0, <5.3.2 || >=6.0.0-rc.1, <6.0.0-rc.5`, fixed in `4.9.4`, `5.3.2`, `6.0.0-rc.5` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Prototype pollution
- [Fortra BoKS Manager crlserver command injection vulnerability](https://agentprime.io/advisories/CVE-2026-79898.md)
  `CVE-2026-79898` · CVE record: Fortra BoKS Manager · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking](https://agentprime.io/advisories/GHSA-33jq-p8c2-q3q4.md)
  `GHSA-33jq-p8c2-q3q4`, `CVE-2026-69085`, `GO-2026-6621` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<0.0.0-20260721043339-eef10568384e`, fixed in `0.0.0-20260721043339-eef10568384e` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: SQL injection
- [WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62071.md)
  `CVE-2026-62071` · CVE record: nickboss WordPress File Upload · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: SQL injection
- [WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-103752.md)
  `CVE-2026-103752` · CVE record: Paul Ryan Authorizer · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Privilege escalation
- [Predictable Active Directory service-account passwords in BoKS Manager](https://agentprime.io/advisories/CVE-2026-79901.md)
  `CVE-2026-79901` · CVE record: Fortra BoKS Manager boks-server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Weak cryptography or TLS
- [Fleet before 4.87.0 Authentication Bypass via Device Identifiers](https://agentprime.io/advisories/CVE-2026-103264.md)
  `CVE-2026-103264` · CVE record: fleetdm fleet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [ground-station before 0.8.0 Authentication Bypass via setup.restore](https://agentprime.io/advisories/CVE-2026-103244.md)
  `CVE-2026-103244` · CVE record: sgoudelis ground-station · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period](https://agentprime.io/advisories/CVE-2026-103655.md)
  `CVE-2026-103655` · CVE record: MISP MISP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter](https://agentprime.io/advisories/CVE-2026-15989.md)
  `CVE-2026-15989` · CVE record: WebRehab Super Forms – Drag & Drop Form Builder · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Privilege escalation
- [Ultimate Multisite <= 2.15.0 - Unauthenticated Authentication Bypass via 'checkout_form' Parameter](https://agentprime.io/advisories/CVE-2026-75957.md)
  `CVE-2026-75957` · CVE record: superdav42 Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Path traversal in dynamically created BACnet File Objects](https://agentprime.io/advisories/CVE-2025-41753.md)
  `CVE-2025-41753` · CVE record: WAGO 0751-9x01 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key](https://agentprime.io/advisories/CVE-2026-101148.md)
  `CVE-2026-101148` · CVE record: Unknown BackupSheep WordPress Backup Plugin · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [Path traversal may allow arbitrary files to be viewed, created, modified, or deleted](https://agentprime.io/advisories/CVE-2026-82824.md)
  `CVE-2026-82824` · CVE record: Hitachi Industrial Equipment Systems Hitachi Coding Software Suite · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed](https://agentprime.io/advisories/CVE-2026-82825.md)
  `CVE-2026-82825` · CVE record: Hitachi Industrial Equipment Systems Hitachi Coding Software Suite · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens](https://agentprime.io/advisories/CVE-2026-82827.md)
  `CVE-2026-82827` · CVE record: Hitachi Industrial Equipment Systems Hitachi Coding Software Suite · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Hard-coded credentials
- [Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process](https://agentprime.io/advisories/CVE-2026-82829.md)
  `CVE-2026-82829` · CVE record: Hitachi Industrial Equipment Systems Hitachi Coding Software Suite · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-912
- [Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface](https://agentprime.io/advisories/CVE-2026-76142.md)
  `CVE-2026-76142` · CVE record: Genians, Inc Genian NAC 5.0.75 LTS Release and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control, Authentication bypass
- [Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field](https://agentprime.io/advisories/CVE-2026-92966.md)
  `CVE-2026-92966` · CVE record: latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Code injection
- [Uncontrolled format string in ASUS Router](https://agentprime.io/advisories/CVE-2026-14157.md)
  `CVE-2026-14157` · CVE record: ASUS Router · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Memory corruption
- [RAGFlow 0.24.0 contains improper access control in get_dataset (api/apps/evaluation_app).](https://agentprime.io/advisories/CVE-2026-51897.md)
  `CVE-2026-51897` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via trace_mindmap.](https://agentprime.io/advisories/CVE-2026-51893.md)
  `CVE-2026-51893` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal.](https://agentprime.io/advisories/CVE-2026-51884.md)
  `CVE-2026-51884` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal.](https://agentprime.io/advisories/CVE-2026-51883.md)
  `CVE-2026-51883` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [The OpenAI-compatible file upload endpoint \`/v1/files\` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal.](https://agentprime.io/advisories/CVE-2026-51882.md)
  `CVE-2026-51882` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [deeptutor 1.4.0 contains code injection in ExecTool.execute.](https://agentprime.io/advisories/CVE-2026-51881.md)
  `CVE-2026-51881` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Code injection
- [deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute.](https://agentprime.io/advisories/CVE-2026-51880.md)
  `CVE-2026-51880` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.write_bot_file.](https://agentprime.io/advisories/CVE-2026-51879.md)
  `CVE-2026-51879` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow.](https://agentprime.io/advisories/CVE-2026-51876.md)
  `CVE-2026-51876` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace, potentially compro…](https://agentprime.io/advisories/CVE-2026-51875.md)
  `CVE-2026-51875` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [Heap-based buffer overflow in esnet iperf3](https://agentprime.io/advisories/CVE-2026-101283.md)
  `CVE-2026-101283` · CVE record: esnet iperf3 · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption
- [Use after free in esnet iperf3](https://agentprime.io/advisories/CVE-2026-101276.md)
  `CVE-2026-101276` · CVE record: esnet iperf3 · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption
- [Meta Platforms, Inc Meta Horizon OS: Prior to v74.0.0.878.1682 of Meta Horizon OS…](https://agentprime.io/advisories/CVE-2026-92173.md)
  `CVE-2026-92173` · CVE record: Meta Platforms, Inc Meta Horizon OS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-923
- [Kiteworks Email Protection Gateway server-side request forgery](https://agentprime.io/advisories/CVE-2026-102105.md)
  `CVE-2026-102105` · CVE record: Kiteworks Email Protection Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Kiteworks Email Protection Gateway improper authentication](https://agentprime.io/advisories/CVE-2026-102106.md)
  `CVE-2026-102106` · CVE record: Kiteworks Email Protection Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Kiteworks Core Authentication Bypass in the Password Reset Workflow](https://agentprime.io/advisories/CVE-2026-102115.md)
  `CVE-2026-102115` · CVE record: Kiteworks Core · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-640
- [Kiteworks Email Protection Gateway server-side request forgery](https://agentprime.io/advisories/CVE-2026-102104.md)
  `CVE-2026-102104` · CVE record: Kiteworks Email Protection Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Kiteworks Email Protection Gateway server-side request forgery](https://agentprime.io/advisories/CVE-2026-102103.md)
  `CVE-2026-102103` · CVE record: Kiteworks Email Protection Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Kiteworks Email Protection Gateway server-side request forgery](https://agentprime.io/advisories/CVE-2026-102102.md)
  `CVE-2026-102102` · CVE record: Kiteworks Email Protection Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTA5LTMwVDIwOjEyOjQyLjAzMjAwMFoiLCJDVkUtMjAyNi0xMDIxMDIiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTEwLTAxVDE5OjE3OjM4LjkzODAwMFoiLCJDVkUtMjAyNi0xMDQyODYiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTEwLTAxVDE5OjE3OjM4LjkzODAwMFoiLCJDVkUtMjAyNi0xMDQyODYiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.