CVE-2024-50623

In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

99% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-25)

CISA KEV

listed 2024-12-13, due 2025-01-03, known ransomware use

CWE

CWE-434

Published

2024-10-28

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• cleo:harmony
• cleo:lexicom
• cleo:vltrader

References

• https://support.cleo.com/hc/en-us/articles/27140294267799-Cleo-Product-Security-Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50623

Check your stackJSON