Advisories · Technology

Cleo Harmony.

Every CVE that names Cleo Harmony among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84115 CVE record

CVSS 6.9 Medium

Cleo Harmony JWT Refresh Token connections privileges management
- Cleo Harmony
- Privilege escalation
Not analysed yet 1 Sept 2026
CVE-2026-84114 CVE record

CVSS 5.3 Medium

Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication
- Cleo Harmony
- Authentication bypass
Not analysed yet 1 Sept 2026