# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)](https://agentprime.io/advisories/CVE-2026-90531.md)
  `CVE-2026-90531` · CVE record: Adobe Adobe Experience Manager as a Cloud Service and 2 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: XML external entities (XXE)
- [Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2026-83662.md)
  `CVE-2026-83662` · CVE record: Adobe Adobe Experience Manager as a Cloud Service and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Incorrect Authorization (CWE-863)](https://agentprime.io/advisories/CVE-2026-75732.md)
  `CVE-2026-75732` · CVE record: Adobe Adobe Experience Manager 6.5 LTS and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Adobe Experience Manager | Incorrect Authorization (CWE-863)](https://agentprime.io/advisories/CVE-2026-48383.md)
  `CVE-2026-48383` · CVE record: Adobe Adobe Experience Manager as a Cloud Service and 2 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Adobe Experience Manager | Incorrect Authorization (CWE-863)](https://agentprime.io/advisories/CVE-2026-48382.md)
  `CVE-2026-48382` · CVE record: Adobe Adobe Experience Manager as a Cloud Service and 2 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2026-106630.md)
  `CVE-2026-106630` · CVE record: Adobe Adobe Experience Manager 6.5 LTS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2026-106629.md)
  `CVE-2026-106629` · CVE record: Adobe Adobe Experience Manager 6.5 LTS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Improper Input Validation (CWE-20)](https://agentprime.io/advisories/CVE-2026-106626.md)
  `CVE-2026-106626` · CVE record: Adobe Adobe Experience Manager as a Cloud Service and 2 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-20
- [Adobe Experience Manager | Improper Input Validation (CWE-20)](https://agentprime.io/advisories/CVE-2026-105895.md)
  `CVE-2026-105895` · CVE record: Adobe Adobe Experience Manager 6.5 · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-20
- [Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php](https://agentprime.io/advisories/CVE-2026-63146.md)
  `CVE-2026-63146` · CVE record: Omnispace Agora Project · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)](https://agentprime.io/advisories/CVE-2026-103848.md)
  `CVE-2026-103848` · CVE record: Adobe Adobe Experience Manager 6.5 LTS and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check](https://agentprime.io/advisories/CVE-2026-110130.md)
  `CVE-2026-110130` · CVE record: Finsys dockhand · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation](https://agentprime.io/advisories/CVE-2026-110112.md)
  `CVE-2026-110112` · CVE record: Finsys dockhand · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Microsoft OpenSSH for Windows Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97816.md)
  `CVE-2026-97816` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Error Reporting Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97815.md)
  `CVE-2026-97815` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Text Shaping Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97814.md)
  `CVE-2026-97814` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Partition Management Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97805.md)
  `CVE-2026-97805` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-20
- [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96113.md)
  `CVE-2026-96113` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-197
- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-105010.md)
  `CVE-2026-105010` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Schannel Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-105008.md)
  `CVE-2026-105008` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass, CWE-420
- [Windows Text Shaping Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-102210.md)
  `CVE-2026-102210` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Network Policy Server (NPS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-100222.md)
  `CVE-2026-100222` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft QUIC Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-100219.md)
  `CVE-2026-100219` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Message Queuing Queue Manager Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-100202.md)
  `CVE-2026-100202` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Shell Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-96951.md)
  `CVE-2026-96951` · CVE record: Microsoft Microsoft Edge (Chromium-based) and 4 more · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96934.md)
  `CVE-2026-96934` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows OLE Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96924.md)
  `CVE-2026-96924` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows BitLocker Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96909.md)
  `CVE-2026-96909` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96320.md)
  `CVE-2026-96320` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Active Directory Federation Services (AD FS) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-96252.md)
  `CVE-2026-96252` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS
- [Microsoft Office Outlook Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70242.md)
  `CVE-2026-70242` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft PostScript Printer Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70153.md)
  `CVE-2026-70153` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-70279.md)
  `CVE-2026-70279` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Microsoft XML Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83935.md)
  `CVE-2026-83935` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [RPC Runtime Library Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83910.md)
  `CVE-2026-83910` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Text Shaping Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83770.md)
  `CVE-2026-83770` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Error Reporting Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83519.md)
  `CVE-2026-83519` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83517.md)
  `CVE-2026-83517` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows System Information Console Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70157.md)
  `CVE-2026-70157` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Media Player Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96096.md)
  `CVE-2026-96096` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Office Outlook Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97749.md)
  `CVE-2026-97749` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Office Outlook Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97016.md)
  `CVE-2026-97016` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96864.md)
  `CVE-2026-96864` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96219.md)
  `CVE-2026-96219` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Office PowerPoint Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88178.md)
  `CVE-2026-88178` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Office Outlook Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88156.md)
  `CVE-2026-88156` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Office Word Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70300.md)
  `CVE-2026-70300` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Office Outlook Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70291.md)
  `CVE-2026-70291` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft PostScript Printer Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70147.md)
  `CVE-2026-70147` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Internet Information Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70024.md)
  `CVE-2026-70024` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-20
- [Microsoft Failover Cluster Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88102.md)
  `CVE-2026-88102` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85928.md)
  `CVE-2026-85928` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Schannel Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-85818.md)
  `CVE-2026-85818` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85814.md)
  `CVE-2026-85814` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85809.md)
  `CVE-2026-85809` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Network Policy Server (NPS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85806.md)
  `CVE-2026-85806` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85792.md)
  `CVE-2026-85792` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-84015.md)
  `CVE-2026-84015` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Imaging Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69886.md)
  `CVE-2026-69886` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83869.md)
  `CVE-2026-83869` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTEwLTEzVDE4OjU5OjU0Ljg0MzAwMFoiLCJDVkUtMjAyNi04Mzg2OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTEwLTEzVDE5OjM5OjAxLjQ3MTAwMFoiLCJDVkUtMjAyNi05MDUzMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTEwLTEzVDE5OjM5OjAxLjQ3MTAwMFoiLCJDVkUtMjAyNi05MDUzMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.