High-Severity Cleo Harmony Bug Lets Attackers Forge Their Way to Admin Access
A high-severity flaw in Cleo Harmony's JWT refresh-token handling, tracked as CVE-2026-84115, lets remote attackers escalate privileges to admin level with a working exploit already public. Cleo has patched the issue in version 5.8.1.11, and given the platform's history with the actively exploited Cl0p campaigns, security teams are urged to upgrade immediately. The post High-Severity Cleo Harmony Bug Lets Attackers Forge Their Way to Admin Access appeared first on Secure Bulletin.
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.