Everything you need to know about the Cleo file transfer vulnerability, including affected products, patches, and temporary mitigations

Cleo's managed file transfer solutions, including Harmony, VLTrader, and Lexicom, face a critical vulnerability (CVE-2024-50623) that allows remote code execution, urging immediate patching.

Huntress reported observing significant exploitation activity targeting Cleo products from December 3rd, with at least 10 businesses compromised, primarily in consumer products, food, and shipping.

Read at ITPro