Cleo
In 3 briefs, most recently 3 September 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
2 Cleo vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 2 of them used in ransomware campaigns. Most recent:
- CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability
- CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability
Coverage in DanSec Daily
- Softaculous BGP hijack delivers malicious Virtualizor update; Dropbox breached via Lenovo ID flaw; 153M US/Canadian driver's license scans for sale on dark web.
- Phishing tops UK attacks, North Korea expands IT worker fraud, and MITRE's CVE funding expires, threatening the vulnerability database.
- Gladinet Triofox/CentreStack RCE under active exploitation, Hertz breach via Cleo zero-day theft, and Fortinet zero-day exploit chatter.