A newly patched flaw in Zoho products underscores how quickly a high-severity advisory can turn into an inventory-and-upgrade race for defenders.