CISA: Urgent patching needed for exploited critical Confluence flaw

BleepingComputer reports that the Cybersecurity and Infrastructure Security Agency has called for the immediate patching of a critical vulnerability in the Questions for Confluence app, tracked as CVE-2022-26138, which has been added to the Known Exploited Vulnerabilities catalog after reports of active exploitation.

cisa confluence critical flaw incident response network security patching vulnerability management