Progress released a Patch for the new flaw and said it had not seen signs of the newer bug being exploited by threat actors.
Meanwhile, the Minnesota Department of Education announced a data breach stemming from the initial vulnerability, whose publicly acknowledged victims also include the BBC and British Airways.