Verdict

Ransomware crews are using this

CISA has linked this vulnerability to known ransomware campaigns. Treat any exposed instance as an active incident, not a patching ticket. 361 vulnerabilities in this band.