Cybersecurity and Infrastructure Security Agency urges affected users to update ASAP.