Cleo

Products

ProductCVEsExploitedLatest
Harmony2–Sep 1, 2026
cleo1–Nov 9, 2022

Exploited and recent CVEs

  • CVE-2026-84115 High 8.3 Cleo Harmony JWT Refresh Token connections privileges management 0.5%
  • CVE-2026-84114 Medium 6.3 Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication 0.5%
  • CVE-2022-42966 Medium 5.9 Exponential ReDoS in cleo leads to denial of service 1.2%