CVE-2024-50623
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload and download vulnerability that can lead to remote code execution with elevated privileges.
CISA Known Exploited Vulnerability
Vendor / Product
Cleo — Multiple Products
Date Added
2024-12-13
Remediation Due
2025-01-03
Ransomware Use
CONFIRMED
https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update ; https://nvd.nist.gov/vuln/detail/CVE-2024-50623
Weakness Classification (1)
Affected Software (3)
References & Advisories (2)
Vendor Advisory
US Government Resource