CISA Adds Critical RocketMQ Bug to Must-Patch List

The US government has ordered all federal civilian agencies to patch a critical vulnerability in Apache RocketMQ, which is currently being exploited in the wild.

The US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2023-33246 to its Known Exploited Vulnerabilities Catalog. It means government agencies have until September 27 to apply a vendor patch to affected systems, although private enterprises are encouraged

Read more

Related Posts

• Ivanti plugs critical bug – but not before it was used against Norwegian governmenta
• CISA Urges Patching of Actively Exploited Citrix Buga
• CISA adds critical Adobe ColdFusion flaw to its Known Exploited Vulnerabilities cataloga
• CISA adds actively exploited flaw in .NET, Visual Studio to its Known Exploited Vulnerabilities cataloga
• Exploitation Of Citrix ShareFile Vulnerability Spikes As CISA Issues Warninga