Federal agencies have days to patch an exploited Progress ADC bug that drew hundreds of attack attempts.