U.S. Department of Defense discloses critical and high severity bugs

The flaws were reported in August and July. They could allow attackers to hijack a subdomain, execute arbitrary code remotely, or view files on the affected machine.