Vulnerability allowing remote code execution has been discussed since at least 9 days ago.