HA
File Transfer
Harmony
by Cleo · last CVE Sep 1, 2026
On CISA KEVExploited in the wildRansomware-linked
6
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 2Low 0
Watch

Add Harmony to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-55956
RansomwareIn wildKEV
9.8
94%
Dec 13
Cleo Multiple Products Unauthenticated File Upload Vulnerability
Affected: before 5.8.0.24
CVE-2024-50623
RansomwareIn wildKEV
9.8
99%
Oct 27
Cleo Multiple Products Unrestricted File Upload Vulnerability
Affected: before 5.8.0.21
CVE-2021-33576
9.8
2%
Jun 18
An issue was discovered in Cleo LexiCom 5.5.0.0
Affected: 5.5.0.0
CVE-2026-84115
8.3
0%
Sep 1
Cleo Harmony JWT Refresh Token connections privileges management
Affected: 5.8.1.0; 5.8.1.1; 5.8.1.2; 5.8.1.3; 5.8.1.4; 5.8.1.5; +5 more
CVE-2026-84114
6.3
0%
Sep 1
Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication
Affected: 5.8.1.0; 5.8.1.1; 5.8.1.2; 5.8.1.3; 5.8.1.4; 5.8.1.5; +5 more
CVE-2021-33577
5.3
1%
Jun 18
An issue was discovered in Cleo LexiCom 5.5.0.0
Affected: 5.5.0.0
Showing 6