CISA warned that a Meteobridge vulnerability patched in May has been exploited in attacks and added the flaw to its KEV catalog.