# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Znuny: In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and…](https://agentprime.io/advisories/CVE-2026-93483.md)
  `CVE-2026-93483` · CVE record: Znuny Znuny · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-348
- [SQL injection in Wheels](https://agentprime.io/advisories/CVE-2026-110911.md)
  `CVE-2026-110911` · CVE record: Wheels Wheels · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: SQL injection
- [AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.](https://agentprime.io/advisories/CVE-2026-104586.md)
  `CVE-2026-104586` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection
- [Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset](https://agentprime.io/advisories/CVE-2026-110867.md)
  `CVE-2026-110867` · CVE record: renovatebot renovate and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Broken access control
- [Token Signing Key Allows Unauthenticated Administrative Access](https://agentprime.io/advisories/CVE-2026-108336.md)
  `CVE-2026-108336` · CVE record: Hitachi Vantara Remot Ops Agent · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Hard-coded credentials
- [Password Reset Functionality Missing Brute-Force Protection](https://agentprime.io/advisories/CVE-2026-108335.md)
  `CVE-2026-108335` · CVE record: Hitachi Vantara Remote Ops Agent · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-640
- [WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php](https://agentprime.io/advisories/CVE-2026-55684.md)
  `CVE-2026-55684` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: SQL injection
- [WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter](https://agentprime.io/advisories/CVE-2026-55680.md)
  `CVE-2026-55680` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: SQL injection
- [WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php](https://agentprime.io/advisories/CVE-2026-55683.md)
  `CVE-2026-55683` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: SQL injection
- [Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force](https://agentprime.io/advisories/CVE-2026-110770.md)
  `CVE-2026-110770` · CVE record: databasus databasus · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass
- [Stirling-PDF: Remote Code Execution via H2](https://agentprime.io/advisories/CVE-2026-85714.md)
  `CVE-2026-85714` · CVE record: Stirling-Tools Stirling-PDF · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [D-Link DIR-868L HNAP CGI cgibin system os command injection](https://agentprime.io/advisories/CVE-2026-110536.md)
  `CVE-2026-110536` · CVE record: D-Link DIR-868L · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain](https://agentprime.io/advisories/CVE-2026-55573.md)
  `CVE-2026-55573` · CVE record: e107inc e107 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Insecure deserialization
- [e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username](https://agentprime.io/advisories/CVE-2026-55572.md)
  `CVE-2026-55572` · CVE record: e107inc e107 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: SQL injection
- [Improper certificate validation in Eclipse Foundation Eclipse Vert.x](https://agentprime.io/advisories/CVE-2026-102476.md)
  `CVE-2026-102476` · CVE record: Eclipse Foundation Eclipse Vert.x · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Weak cryptography or TLS
- [Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access](https://agentprime.io/advisories/CVE-2026-77371.md)
  `CVE-2026-77371` · CVE record: getredash redash · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Broken access control
- [Out-of-bounds write in Eclipse Foundation NetX Duo](https://agentprime.io/advisories/CVE-2026-103415.md)
  `CVE-2026-103415` · CVE record: Eclipse Foundation NetX Duo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface](https://agentprime.io/advisories/CVE-2026-0322.md)
  `CVE-2026-0322` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled](https://agentprime.io/advisories/CVE-2026-101954.md)
  `CVE-2026-101954` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass
- [Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured](https://agentprime.io/advisories/CVE-2026-101983.md)
  `CVE-2026-101983` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking](https://agentprime.io/advisories/CVE-2026-108390.md)
  `CVE-2026-108390` · CVE record: hestiacp hestiacp · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection, Code injection, CWE-427
- [Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used](https://agentprime.io/advisories/CVE-2026-101982.md)
  `CVE-2026-101982` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [F´: Unvalidated Port Index in GenericHub](https://agentprime.io/advisories/CVE-2026-92152.md)
  `CVE-2026-92152` · CVE record: nasa fprime · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-129
- [Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled](https://agentprime.io/advisories/CVE-2026-33796.md)
  `CVE-2026-33796` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured](https://agentprime.io/advisories/CVE-2026-33792.md)
  `CVE-2026-33792` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service](https://agentprime.io/advisories/CVE-2026-33789.md)
  `CVE-2026-33789` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution](https://agentprime.io/advisories/CVE-2026-102182.md)
  `CVE-2026-102182` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise](https://agentprime.io/advisories/CVE-2026-102178.md)
  `CVE-2026-102178` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used](https://agentprime.io/advisories/CVE-2026-102175.md)
  `CVE-2026-102175` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used](https://agentprime.io/advisories/CVE-2026-102037.md)
  `CVE-2026-102037` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Other injection
- [Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled](https://agentprime.io/advisories/CVE-2026-102031.md)
  `CVE-2026-102031` · CVE record: Juniper Networks Junos OS Evolved · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718](https://agentprime.io/advisories/CVE-2026-109439.md)
  `CVE-2026-109439` · CVE record: LANTRONIX XPress-DR and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass
- [Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised](https://agentprime.io/advisories/CVE-2026-101990.md)
  `CVE-2026-101990` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled](https://agentprime.io/advisories/CVE-2026-101950.md)
  `CVE-2026-101950` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used](https://agentprime.io/advisories/CVE-2026-101955.md)
  `CVE-2026-101955` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication](https://agentprime.io/advisories/CVE-2026-101997.md)
  `CVE-2026-101997` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: SQL injection
- [Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used](https://agentprime.io/advisories/CVE-2026-102062.md)
  `CVE-2026-102062` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution](https://agentprime.io/advisories/CVE-2026-102084.md)
  `CVE-2026-102084` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1286
- [Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution](https://agentprime.io/advisories/CVE-2026-101986.md)
  `CVE-2026-101986` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass
- [Junos OS: Unauthorized root command execution when J-Web is enabled](https://agentprime.io/advisories/CVE-2026-101956.md)
  `CVE-2026-101956` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass
- [Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled](https://agentprime.io/advisories/CVE-2026-101980.md)
  `CVE-2026-101980` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used](https://agentprime.io/advisories/CVE-2026-102070.md)
  `CVE-2026-102070` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used](https://agentprime.io/advisories/CVE-2026-101967.md)
  `CVE-2026-101967` · CVE record: Juniper Networks Junos OS Evolved · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used](https://agentprime.io/advisories/CVE-2026-102068.md)
  `CVE-2026-102068` · CVE record: Juniper Networks Junos OS Evolved · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Cisco Secure Email Gateway Arbitrary File Write Vulnerability](https://agentprime.io/advisories/CVE-2026-76519.md)
  `CVE-2026-76519` · CVE record: Cisco Cisco Secure Email · CVSS 9.8 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 14 Oct 2026 · Tags: Path traversal
- [Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS](https://agentprime.io/advisories/CVE-2026-86002.md)
  `CVE-2026-86002` · CVE record: dokku dokku · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [Zulip: OpenID Connect authentication ignores the email_verified claim](https://agentprime.io/advisories/CVE-2026-102893.md)
  `CVE-2026-102893` · CVE record: zulip zulip · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass
- [nodejs-whisper allows OS command injection through crafted audio file paths](https://agentprime.io/advisories/GHSA-2f48-3555-fpx6.md)
  `GHSA-2f48-3555-fpx6`, `CVE-2026-110644` · npm `nodejs-whisper`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [git-diff: OS command injection vulnerability via crafted strings to the gitDiff API](https://agentprime.io/advisories/GHSA-6wfj-92cw-88vg.md)
  `GHSA-6wfj-92cw-88vg`, `CVE-2026-110634` · npm `git-diff`: affected `<2.0.7`, fixed in `2.0.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Improper certificate validation in Dell Terraform Provider for Redfish](https://agentprime.io/advisories/CVE-2026-91881.md)
  `CVE-2026-91881` · CVE record: Dell Terraform Provider for Redfish · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Weak cryptography or TLS
- [NGINX ngx_http_core_module vulnerability](https://agentprime.io/advisories/CVE-2026-97205.md)
  `CVE-2026-97205` · CVE record: F5 NGINX Plus and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [NGINX map directive and regex matching vulnerability](https://agentprime.io/advisories/CVE-2026-93479.md)
  `CVE-2026-93479` · CVE record: F5 NGINX Plus and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [NGINX ngx_http_core_module vulnerability](https://agentprime.io/advisories/CVE-2026-15176.md)
  `CVE-2026-15176` · CVE record: F5 NGINX Plus and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Gitea Org-mode file disclosure and code execution](https://agentprime.io/advisories/CVE-2026-59774.md)
  `CVE-2026-59774` · CVE record: Gitea Gitea · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.28 · Not analysed yet · Published 14 Oct 2026 · Tags: Path traversal
- [Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths](https://agentprime.io/advisories/CVE-2026-110650.md)
  `CVE-2026-110650` · CVE record: anshulkharb thumbnail · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Stills before 25.24.2 OS Command Injection via Media File Names](https://agentprime.io/advisories/CVE-2026-110649.md)
  `CVE-2026-110649` · CVE record: shahkashani stills · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()](https://agentprime.io/advisories/CVE-2026-110646.md)
  `CVE-2026-110646` · CVE record: beganovich snappdf · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()](https://agentprime.io/advisories/CVE-2026-110645.md)
  `CVE-2026-110645` · CVE record: ArsalanDotMe video-stitch · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath](https://agentprime.io/advisories/CVE-2026-110643.md)
  `CVE-2026-110643` · CVE record: kky-ykk transcribe2texts · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Whisper-node through 1.1.1 OS Command Injection via filePath and language](https://agentprime.io/advisories/CVE-2026-110640.md)
  `CVE-2026-110640` · CVE record: ariym whisper-node · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTEwLTE0VDE0OjE3OjExLjI0OTAwMFoiLCJDVkUtMjAyNi0xMTA2NDAiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTEwLTE1VDA0OjI2OjUwLjY5NzAwMFoiLCJDVkUtMjAyNi0xMDg1ODciXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTEwLTE1VDA0OjI2OjUwLjY5NzAwMFoiLCJDVkUtMjAyNi0xMDg1ODciXQ>. Everything for agents: <https://agentprime.io/llms.txt>.