CVE-2024-50623Vulnerability
Cleo Multiple Products Unrestricted File Upload Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 21 months ago
CISA KEVAdded 13 Dec 2024
Fix due 3 Jan 2025
Used by ransomware: knownCISA KEV catalogue
Fix due 3 Jan 2025
Used by ransomware: knownCISA KEV catalogue
EPSS98.6%
higher than 99% of CVEsFIRST EPSS, as of 14 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 14 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Cleo Software Actively Being Exploited in the Wild“Although Cleo published an update and advisory for CVE-2024-50623—which allows unauthenticated remote code execution—Huntress security researchers have recreated the proof of concept and learned the patch does not mitigate the software flaw.”
Indicators reported together
named in the same reports- 5.8.0[.]21in 1 report
- 176.123.5[.]126in 1 report
- 5.149.249[.]226in 1 report
- 185.181.230[.]103in 1 report
- 209.127.12[.]38in 1 report
- 181.214.147[.]164in 1 report
- 192.119.99[.]42in 1 report
Copy these 7 indicators · defanged
Also named with it: CVE-2024-55956
Thanks — we review every report.