This vulnerability was patched in May 2024 but was only allocated a CVE in November after evidence of exploitation ...