# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection](https://agentprime.io/advisories/CVE-2026-121930.md)
  `CVE-2026-121930` · CVE record: Linksys WRT54GL · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [Unrestricted file upload in Yealink Plug-in Softwares](https://agentprime.io/advisories/CVE-2026-122120.md)
  `CVE-2026-122120` · CVE record: Yealink Plug-in Softwares · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Unrestricted file upload
- [FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close](https://agentprime.io/advisories/CVE-2026-121953.md)
  `CVE-2026-121953` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability](https://agentprime.io/advisories/CVE-2026-121952.md)
  `CVE-2026-121952` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service](https://agentprime.io/advisories/CVE-2026-121639.md)
  `CVE-2026-121639` · CVE record: WatchGuard AuthPoint Authentication Gateway · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass, CWE-252
- [WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks](https://agentprime.io/advisories/CVE-2026-121638.md)
  `CVE-2026-121638` · CVE record: WatchGuard AuthPoint Authentication Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Weak cryptography or TLS
- [WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions](https://agentprime.io/advisories/CVE-2026-121640.md)
  `CVE-2026-121640` · CVE record: WatchGuard AuthPoint Authentication Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass
- [The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) because the ImageMagi…](https://agentprime.io/advisories/CVE-2026-122006.md)
  `CVE-2026-122006` · CVE record: rubyonrails Active Storage · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-1188
- [Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking](https://agentprime.io/advisories/CVE-2026-121939.md)
  `CVE-2026-121939` · CVE record: David-Crty Databasement · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass
- [WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-119481.md)
  `CVE-2026-119481` · CVE record: Crocoblock JetFormBuilder · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Privilege escalation
- [WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-65555.md)
  `CVE-2026-65555` · CVE record: Uncanny Owl Uncanny Toolkit for LearnDash · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Privilege escalation
- [Forged LFT metadata permits arbitrary file read and deletion](https://agentprime.io/advisories/CVE-2026-114425.md)
  `CVE-2026-114425` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Path traversal
- [Code execution through double evaluation in address replacement rules](https://agentprime.io/advisories/CVE-2026-114424.md)
  `CVE-2026-114424` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Code injection
- [Command injection vulnerability](https://agentprime.io/advisories/CVE-2026-77690.md)
  `CVE-2026-77690` · CVE record: Zohocorp ManageEngine Key Manager Plus · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [Origin validation error in better-auth Better Auth](https://agentprime.io/advisories/CVE-2026-121802.md)
  `CVE-2026-121802` · CVE record: better-auth Better Auth · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-346
- [Linksys E5600 Login mesh_login.cgi improper authentication](https://agentprime.io/advisories/CVE-2026-121615.md)
  `CVE-2026-121615` · CVE record: Linksys E5600 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass
- [Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials](https://agentprime.io/advisories/CVE-2026-121609.md)
  `CVE-2026-121609` · CVE record: Qihoo 360 Whole Home Router M5 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Hard-coded credentials
- [Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injection](https://agentprime.io/advisories/CVE-2026-121607.md)
  `CVE-2026-121607` · CVE record: Qihoo 360 D603-2 and 3 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification](https://agentprime.io/advisories/CVE-2026-121606.md)
  `CVE-2026-121606` · CVE record: Qihoo 360 D621-2 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Weak cryptography or TLS, CWE-345
- [TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow](https://agentprime.io/advisories/CVE-2026-121600.md)
  `CVE-2026-121600` · CVE record: TOTOLINK A950RG · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow](https://agentprime.io/advisories/CVE-2026-121599.md)
  `CVE-2026-121599` · CVE record: TOTOLINK A950RG · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow](https://agentprime.io/advisories/CVE-2026-121598.md)
  `CVE-2026-121598` · CVE record: TOTOLINK A950RG · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow](https://agentprime.io/advisories/CVE-2026-121597.md)
  `CVE-2026-121597` · CVE record: TOTOLINK A950RG · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption
- [Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-92189.md)
  `CVE-2026-92189` · CVE record: Quest Foglight for Databases · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal
- [Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-92188.md)
  `CVE-2026-92188` · CVE record: Quest Foglight for Databases · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Authentication bypass
- [Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-92190.md)
  `CVE-2026-92190` · CVE record: Quest Foglight for Databases · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Insecure deserialization
- [NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-114549.md)
  `CVE-2026-114549` · CVE record: NoMachine NoMachine · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Emerson Ovation Missing Authentication for Critical Functionality](https://agentprime.io/advisories/CVE-2022-29966.md)
  `CVE-2022-29966` · CVE record: Emerson Ovation · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Authentication bypass
- [CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)](https://agentprime.io/advisories/CVE-2026-22058.md)
  `CVE-2026-22058` · CVE record: NETAPP StorageGRID (formerly StorageGRID Webscale) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Authentication bypass
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-120931.md)
  `CVE-2026-120931` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters](https://agentprime.io/advisories/CVE-2026-119084.md)
  `CVE-2026-119084` · CVE record: AWS amazon-redshift-jdbc-driver · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection
- [Etrel INCH AC Charging Station Hard-coded Default Credentials](https://agentprime.io/advisories/CVE-2026-112354.md)
  `CVE-2026-112354` · CVE record: Etrel d.o.o. Etrel INCH · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-1392
- [Cross-site scripting in Dell Wyse Management Suite](https://agentprime.io/advisories/CVE-2026-82158.md)
  `CVE-2026-82158` · CVE record: Dell Wyse Management Suite · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Cross-site scripting (XSS)
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121073.md)
  `CVE-2026-121073` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121189.md)
  `CVE-2026-121189` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121077.md)
  `CVE-2026-121077` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121257.md)
  `CVE-2026-121257` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121202.md)
  `CVE-2026-121202` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121030.md)
  `CVE-2026-121030` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38…](https://agentprime.io/advisories/CVE-2026-121200.md)
  `CVE-2026-121200` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-706
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-121234.md)
  `CVE-2026-121234` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Privilege escalation
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121076.md)
  `CVE-2026-121076` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121060.md)
  `CVE-2026-121060` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121034.md)
  `CVE-2026-121034` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121104.md)
  `CVE-2026-121104` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121241.md)
  `CVE-2026-121241` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Stack-based buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-121249.md)
  `CVE-2026-121249` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121214.md)
  `CVE-2026-121214` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121114.md)
  `CVE-2026-121114` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121250.md)
  `CVE-2026-121250` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121089.md)
  `CVE-2026-121089` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121148.md)
  `CVE-2026-121148` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121131.md)
  `CVE-2026-121131` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Heap-based buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-121086.md)
  `CVE-2026-121086` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-121037.md)
  `CVE-2026-121037` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121185.md)
  `CVE-2026-121185` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121071.md)
  `CVE-2026-121071` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-121074.md)
  `CVE-2026-121074` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121126.md)
  `CVE-2026-121126` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Heap-based buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-121247.md)
  `CVE-2026-121247` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTExLTAzVDIwOjQyOjIyLjI1MTAwMFoiLCJDVkUtMjAyNi0xMjEyNDciXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTExLTA0VDE4OjQ1OjE0LjM5ODAwMFoiLCJDVkUtMjAyNi0xMjE5MzEiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTExLTA0VDE4OjQ1OjE0LjM5ODAwMFoiLCJDVkUtMjAyNi0xMjE5MzEiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.