# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Linksys E1700 setVlan stack-based overflow](https://agentprime.io/advisories/CVE-2026-108893.md)
  `CVE-2026-108893` · CVE record: Linksys E1700 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow](https://agentprime.io/advisories/CVE-2026-108892.md)
  `CVE-2026-108892` · CVE record: Linksys E1700 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/\* proxy](https://agentprime.io/advisories/CVE-2026-85499.md)
  `CVE-2026-85499` · CVE record: Apache Software Foundation Apache SkyWalking BanyanDB · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication](https://agentprime.io/advisories/CVE-2026-93582.md)
  `CVE-2026-93582` · CVE record: OTRS GmbH (former OTRS AG) OTRS and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [Insufficient Session Revocation for JWT Authentication](https://agentprime.io/advisories/CVE-2026-78357.md)
  `CVE-2026-78357` · CVE record: OTRS GmbH (former OTRS AG) OTRS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection](https://agentprime.io/advisories/CVE-2026-108804.md)
  `CVE-2026-108804` · CVE record: TRENDnet TEW-751DR and 2 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Command injection
- [BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key](https://agentprime.io/advisories/CVE-2026-108860.md)
  `CVE-2026-108860` · CVE record: SciSharp BotSharp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Hard-coded credentials
- [Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose](https://agentprime.io/advisories/CVE-2026-108753.md)
  `CVE-2026-108753` · CVE record: agnaistic agnai · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Hard-coded credentials
- [TOZED X300 IPPingDiagnostics process_ping os command injection](https://agentprime.io/advisories/CVE-2026-108576.md)
  `CVE-2026-108576` · CVE record: TOZED X300 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Command injection
- [OpenSpug File Transfer transfer os command injection](https://agentprime.io/advisories/CVE-2026-108540.md)
  `CVE-2026-108540` · CVE record: OpenSpug Spug · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Command injection
- [Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup](https://agentprime.io/advisories/CVE-2026-86717.md)
  `CVE-2026-86717` · CVE record: Unknown Insurify · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update](https://agentprime.io/advisories/CVE-2026-86706.md)
  `CVE-2026-86706` · CVE record: Unknown Quick quotes · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign](https://agentprime.io/advisories/CVE-2026-85121.md)
  `CVE-2026-85121` · CVE record: Unknown Insurify · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion](https://agentprime.io/advisories/CVE-2026-85118.md)
  `CVE-2026-85118` · CVE record: Unknown AI Content Generator Marketing · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Privilege escalation
- [Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter](https://agentprime.io/advisories/CVE-2026-84737.md)
  `CVE-2026-84737` · CVE record: Unknown Freeton WP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Authentication bypass
- [Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter](https://agentprime.io/advisories/CVE-2026-84734.md)
  `CVE-2026-84734` · CVE record: Unknown Mindstien Quick Login · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Authentication bypass
- [click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update](https://agentprime.io/advisories/CVE-2026-84254.md)
  `CVE-2026-84254` · CVE record: Unknown click5 CRM add-on to Contact Form 7 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Update](https://agentprime.io/advisories/CVE-2026-84253.md)
  `CVE-2026-84253` · CVE record: Unknown click5 CRM add-on to Gravity Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update](https://agentprime.io/advisories/CVE-2026-84252.md)
  `CVE-2026-84252` · CVE record: Unknown click5 CRM add-on to WPForms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Update](https://agentprime.io/advisories/CVE-2026-84251.md)
  `CVE-2026-84251` · CVE record: Unknown click5 CRM add-on to Ninja Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [Fundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure](https://agentprime.io/advisories/CVE-2026-81649.md)
  `CVE-2026-81649` · CVE record: Unknown Fundiin cho WooCommerce · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Broken access control
- [Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE](https://agentprime.io/advisories/CVE-2026-104028.md)
  `CVE-2026-104028` · CVE record: Unknown Anton Extensions · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Unrestricted file upload
- [Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect](https://agentprime.io/advisories/CVE-2026-108707.md)
  `CVE-2026-108707` · CVE record: WuKongOpenSource Wukong_HRM · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2026 · Tags: Authentication bypass
- [WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-81797.md)
  `CVE-2026-81797` · CVE record: ThemeRex Buzz Stone | Magazine & Viral Blog WordPress Theme · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-78535.md)
  `CVE-2026-78535` · CVE record: ThemeRex Photolia · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-78533.md)
  `CVE-2026-78533` · CVE record: AncoraThemes Qwery · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-78531.md)
  `CVE-2026-78531` · CVE record: ThemeREX Jacqueline · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-78529.md)
  `CVE-2026-78529` · CVE record: ThemeREX Alliance · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-66569.md)
  `CVE-2026-66569` · CVE record: axiomthemes Kicker · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-66568.md)
  `CVE-2026-66568` · CVE record: axiomthemes Original · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-66567.md)
  `CVE-2026-66567` · CVE record: AncoraThemes Anesta · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-66565.md)
  `CVE-2026-66565` · CVE record: axiomthemes FC United · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-66564.md)
  `CVE-2026-66564` · CVE record: ThemeREX ShiftCV · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-66563.md)
  `CVE-2026-66563` · CVE record: ThemeREX Windsor · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-66483.md)
  `CVE-2026-66483` · CVE record: ThemeREX Education Center · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-66482.md)
  `CVE-2026-66482` · CVE record: AncoraThemes Drone Media · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-62129.md)
  `CVE-2026-62129` · CVE record: WPFunnels Creator LMS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Unrestricted file upload
- [WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62125.md)
  `CVE-2026-62125` · CVE record: ThemeREX Asia Garden · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62124.md)
  `CVE-2026-62124` · CVE record: ThemeREX N7 | Golf Club Sports & Events · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62123.md)
  `CVE-2026-62123` · CVE record: ThemeREX Invetex · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62120.md)
  `CVE-2026-62120` · CVE record: ThemeREX Law Office · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62090.md)
  `CVE-2026-62090` · CVE record: ThemeREX WineShop · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62087.md)
  `CVE-2026-62087` · CVE record: ThemeREX Equadio · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62086.md)
  `CVE-2026-62086` · CVE record: ThemeREX Juno · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62077.md)
  `CVE-2026-62077` · CVE record: BoldThemes Avala · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62076.md)
  `CVE-2026-62076` · CVE record: The4 Kalles · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62054.md)
  `CVE-2026-62054` · CVE record: ThemeREX Yacht Rental · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62053.md)
  `CVE-2026-62053` · CVE record: ThemeREX Wine House · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62052.md)
  `CVE-2026-62052` · CVE record: ThemeREX Tipsy · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62051.md)
  `CVE-2026-62051` · CVE record: ThemeREX Stargaze · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62050.md)
  `CVE-2026-62050` · CVE record: ThemeREX Splendour · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-62032.md)
  `CVE-2026-62032` · CVE record: Designinvento DirectoryPress · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: File inclusion
- [WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-62031.md)
  `CVE-2026-62031` · CVE record: Stylemix uListing · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: SQL injection
- [WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-62025.md)
  `CVE-2026-62025` · CVE record: Tailored Media Tailored Tools · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Unrestricted file upload
- [WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-62024.md)
  `CVE-2026-62024` · CVE record: CodeBard CodeBard Help Desk · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Unrestricted file upload
- [WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-62022.md)
  `CVE-2026-62022` · CVE record: Select-Themes Tonda Membership · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Privilege escalation
- [WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-42723.md)
  `CVE-2026-42723` · CVE record: AncoraThemes CleanSkin · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-42719.md)
  `CVE-2026-42719` · CVE record: Sarah Giles Dynamic User Directory · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-42718.md)
  `CVE-2026-42718` · CVE record: Pluggabl Booster for WooCommerce · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization
- [WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-42716.md)
  `CVE-2026-42716` · CVE record: payever Payever - WooCommerce Gateway · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Insecure deserialization

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTEwLTEwVDE5OjM1OjE2Ljc2ODAwMFoiLCJDVkUtMjAyNi00MjcxNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTEwLTEyVDE0OjAwOjE1LjUxNjAwMFoiLCJDVkUtMjAyNi0xMDg4OTQiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTEwLTEyVDE0OjAwOjE1LjUxNjAwMFoiLCJDVkUtMjAyNi0xMDg4OTQiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.