Microsoft semantic-kernel

• CVE-2026-26030 Critical 10.0 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution 3.9%
• CVE-2026-25592 Critical 10.0 Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK 2.5%