CVE-2024-55956Vulnerability
Cleo Multiple Products Unauthenticated File Upload Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 21 months ago
CISA KEVAdded 17 Dec 2024
Fix due 7 Jan 2025
Used by ransomware: knownCISA KEV catalogue
Fix due 7 Jan 2025
Used by ransomware: knownCISA KEV catalogue
EPSS94.0%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
Cleo Software Actively Being Exploited in the Wild“CVE-2024-55956 Summary”
-
Cleo Malichus Malware Analysis CVE-2024-55956| Huntress“Cleo Malichus Malware Analysis CVE-2024-55956| Huntress”
Indicators reported together
named in the same reports- 5.8.0[.]21in 1 report
- 176.123.5[.]126in 1 report
- 5.149.249[.]226in 1 report
- 185.181.230[.]103in 1 report
- 209.127.12[.]38in 1 report
- 181.214.147[.]164in 1 report
- 192.119.99[.]42in 1 report
- hxxps://github[.]com/huntresslabs/threat-intel/tree/main/2024/2024-12/Cleoin 1 report
Copy these 8 indicators · defanged
Also named with it: CVE-2024-50623
Thanks — we review every report.