A national cyber agency has added three vulnerabilities to its catalogue of flaws known to be exploited in the wild.
The most serious is an unauthenticated remote code execution bug in a widely deployed mail server. The other two affect a file transfer appliance and a network management console.
Government bodies must patch or take the affected systems offline within three weeks. The agency urges every organisation running these products to treat them as a priority.
What to do
- List internet-facing mail servers, file transfer appliances and management consoles.
- Patch them, or remove them from the internet until you can.