What’s Vulnerable › Products

Cleo Harmony vulnerabilities

4 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Cleo Harmony version is affected

Exploited Cleo Harmony vulnerabilities

• CVE-2024-55956 — Cleo Multiple Products Unauthenticated File Upload Vulnerability
• CVE-2024-50623 — Cleo Multiple Products Unrestricted File Upload Vulnerability

Latest Cleo Harmony vulnerabilities

• CVE-2026-84115 — Cleo Harmony JWT Refresh Token connections privileges management (CVSS 8.3)
• CVE-2026-84114 — Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication (CVSS 6.3)
• CVE-2024-55956 — Cleo Multiple Products Unauthenticated File Upload Vulnerability (CVSS 9.8) — exploited
• CVE-2024-50623 — Cleo Multiple Products Unrestricted File Upload Vulnerability (CVSS 9.8) — exploited