# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Windows Shell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83782.md)
  `CVE-2026-83782` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows CCFFilter Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83780.md)
  `CVE-2026-83780` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Error Reporting Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83748.md)
  `CVE-2026-83748` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Error Reporting Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83693.md)
  `CVE-2026-83693` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft PowerShell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83578.md)
  `CVE-2026-83578` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows iSCSI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69883.md)
  `CVE-2026-69883` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows iSCSI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69634.md)
  `CVE-2026-69634` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows iSCSI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69705.md)
  `CVE-2026-69705` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Rich Text Edit Control Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70096.md)
  `CVE-2026-70096` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows libarchive Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69639.md)
  `CVE-2026-69639` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Visual Studio Code Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-102238.md)
  `CVE-2026-102238` · CVE record: Microsoft Visual Studio Code · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)](https://agentprime.io/advisories/CVE-2026-103849.md)
  `CVE-2026-103849` · CVE record: Adobe Adobe Commerce and 2 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2026-91013.md)
  `CVE-2026-91013` · CVE record: Adobe Adobe Commerce and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Adobe Commerce | Improper Input Validation (CWE-20)](https://agentprime.io/advisories/CVE-2026-92464.md)
  `CVE-2026-92464` · CVE record: Adobe Adobe Commerce and 2 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-20
- [Adobe Commerce | Incorrect Authorization (CWE-863)](https://agentprime.io/advisories/CVE-2026-92909.md)
  `CVE-2026-92909` · CVE record: Adobe Adobe Commerce and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2026-100133.md)
  `CVE-2026-100133` · CVE record: Adobe Adobe Commerce and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents](https://agentprime.io/advisories/CVE-2026-75120.md)
  `CVE-2026-75120` · CVE record: OpenText Endpoint Investigator and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Potential command execution on the host running JFrog CLI.](https://agentprime.io/advisories/CVE-2026-92892.md)
  `CVE-2026-92892` · CVE record: jfrog jfrog-cli · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [Path traversal in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2026-106173.md)
  `CVE-2026-106173` · CVE record: Fortinet FortiSIEM · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Docker Hub account conversion could reassign an active personal access token to another user](https://agentprime.io/advisories/CVE-2026-105445.md)
  `CVE-2026-105445` · CVE record: Docker Docker Hub · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation
- [OpenCATS: Authenticated RCE in the Import module](https://agentprime.io/advisories/CVE-2026-54454.md)
  `CVE-2026-54454` · CVE record: opencats OpenCATS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Unrestricted file upload
- [Ivanti Neurons Patch for Intune: An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote…](https://agentprime.io/advisories/CVE-2026-109412.md)
  `CVE-2026-109412` · CVE record: Ivanti Neurons Patch for Intune · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-749
- [RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page](https://agentprime.io/advisories/CVE-2026-55183.md)
  `CVE-2026-55183` · CVE record: Zarestia-Dev rclone-manager · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Cronicle: Stored XSS in admin Activity Log via account full_name field](https://agentprime.io/advisories/CVE-2026-55562.md)
  `CVE-2026-55562` · CVE record: jhuckaby Cronicle · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [External control of a file path in Ivanti Xtraction](https://agentprime.io/advisories/CVE-2026-106042.md)
  `CVE-2026-106042` · CVE record: Ivanti Xtraction · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [BUG-000187331 Portal for ArcGIS has a security vulnerability](https://agentprime.io/advisories/CVE-2026-69227.md)
  `CVE-2026-69227` · CVE record: Esri Portal for ArcGIS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater](https://agentprime.io/advisories/CVE-2026-55695.md)
  `CVE-2026-55695` · CVE record: fearlessgeekmedia FearlessCMS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions](https://agentprime.io/advisories/CVE-2026-103928.md)
  `CVE-2026-103928` · CVE record: metabase metabase · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [x86/AMD: ineffectual Zenbleed workaround](https://agentprime.io/advisories/CVE-2026-79608.md)
  `CVE-2026-79608` · CVE record: Xen Xen · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-670
- [Authentication bypass by spoofing in Ivanti Connect Secure](https://agentprime.io/advisories/CVE-2026-104935.md)
  `CVE-2026-104935` · CVE record: Ivanti Connect Secure · CVSS 8.6 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.89 · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets](https://agentprime.io/advisories/CVE-2026-55675.md)
  `CVE-2026-55675` · CVE record: saltyorg docs · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection, CWE-829, CWE-1357
- [DragonflyDB stream RDB deserialization double-free](https://agentprime.io/advisories/CVE-2026-104192.md)
  `CVE-2026-104192` · CVE record: dragonflydb dragonfly · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery](https://agentprime.io/advisories/CVE-2026-53709.md)
  `CVE-2026-53709` · CVE record: IBM mcp-context-forge · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass, Hard-coded credentials, CWE-1188
- [CVFS Command Execution](https://agentprime.io/advisories/CVE-2026-77099.md)
  `CVE-2026-77099` · CVE record: Commvault Commvault Cloud and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding](https://agentprime.io/advisories/CVE-2026-107460.md)
  `CVE-2026-107460` · CVE record: Apache Software Foundation Apache Fesod (Incubating) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions](https://agentprime.io/advisories/CVE-2026-109520.md)
  `CVE-2026-109520` · CVE record: Colorful iGameCenter · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation
- [Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker](https://agentprime.io/advisories/CVE-2026-74040.md)
  `CVE-2026-74040` · CVE record: Wazuh wazuh-manager · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Missing authentication in NVIDIA AIStore framework](https://agentprime.io/advisories/CVE-2026-65173.md)
  `CVE-2026-65173` · CVE record: NVIDIA AIStore framework · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Execution with unnecessary privileges in NVIDIA AIStore framework](https://agentprime.io/advisories/CVE-2026-65162.md)
  `CVE-2026-65162` · CVE record: NVIDIA AIStore framework · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation
- [Mitigation bypass in the DOM: Core & HTML component](https://agentprime.io/advisories/CVE-2026-109780.md)
  `CVE-2026-109780` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-693
- [Invalid pointer, undefined behavior in the DOM: Notifications component](https://agentprime.io/advisories/CVE-2026-109774.md)
  `CVE-2026-109774` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Same-origin policy bypass in the DevTools component](https://agentprime.io/advisories/CVE-2026-109772.md)
  `CVE-2026-109772` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346
- [Sandbox escape in the DOM: Content Processes component](https://agentprime.io/advisories/CVE-2026-109755.md)
  `CVE-2026-109755` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-693
- [Site isolation issue in the DOM: Web Authentication component](https://agentprime.io/advisories/CVE-2026-109750.md)
  `CVE-2026-109750` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Sandbox escape due to uninitialized memory in the DOM: Web Serial component](https://agentprime.io/advisories/CVE-2026-109745.md)
  `CVE-2026-109745` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component](https://agentprime.io/advisories/CVE-2026-109740.md)
  `CVE-2026-109740` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Sandbox escape due to incorrect boundary conditions in the Networking component](https://agentprime.io/advisories/CVE-2026-109708.md)
  `CVE-2026-109708` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Sandbox escape due to use-after-free in the Networking component](https://agentprime.io/advisories/CVE-2026-109707.md)
  `CVE-2026-109707` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component](https://agentprime.io/advisories/CVE-2026-109705.md)
  `CVE-2026-109705` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [TRENDnet TEW-432BRP formTcpipSetup stack-based overflow](https://agentprime.io/advisories/CVE-2026-109157.md)
  `CVE-2026-109157` · CVE record: TRENDnet TEW-432BRP · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others](https://agentprime.io/advisories/CVE-2026-63354.md)
  `CVE-2026-63354` · CVE record: Siemens SIMATIC Drive Controller CPU 1504D TF and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others](https://agentprime.io/advisories/CVE-2026-63353.md)
  `CVE-2026-63353` · CVE record: Siemens SIMATIC Drive Controller CPU 1504D TF and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Eval injection in Siemens SIMATIC Drive Controller CPU 1504D TF and others](https://agentprime.io/advisories/CVE-2026-63350.md)
  `CVE-2026-63350` · CVE record: Siemens SIMATIC Drive Controller CPU 1504D TF and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Missing Authentication Vulnerability in JTL-WMS](https://agentprime.io/advisories/CVE-2026-89309.md)
  `CVE-2026-89309` · CVE record: JTL SW GmbH JTL-WMS · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Wavlink WL-WN592AX6 wmapd system os command injection](https://agentprime.io/advisories/CVE-2026-109110.md)
  `CVE-2026-109110` · CVE record: Wavlink WL-WN592AX6 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow](https://agentprime.io/advisories/CVE-2026-109109.md)
  `CVE-2026-109109` · CVE record: Wavlink WL-WN530BE1-A · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection](https://agentprime.io/advisories/CVE-2026-109108.md)
  `CVE-2026-109108` · CVE record: Wavlink WL-WN530BE1-A · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification](https://agentprime.io/advisories/CVE-2026-108971.md)
  `CVE-2026-108971` · CVE record: D-Link DCS-930L · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Prototype pollution in Perforce Helix Authentication Service](https://agentprime.io/advisories/CVE-2026-109758.md)
  `CVE-2026-109758` · CVE record: Perforce Helix Authentication Service · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Hard-coded credentials, Prototype pollution
- [Integer Overflow or Wraparound in GitLab](https://agentprime.io/advisories/CVE-2026-97229.md)
  `CVE-2026-97229` · CVE record: GitLab GitLab · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.69 · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTEwLTEzVDAxOjA1OjQ2LjE2NjAwMFoiLCJDVkUtMjAyNi05NzIyOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTEwLTEzVDE4OjU5OjU0Ljg0MzAwMFoiLCJDVkUtMjAyNi04Mzg2OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTEwLTEzVDE4OjU5OjU0Ljg0MzAwMFoiLCJDVkUtMjAyNi04Mzg2OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.