Skip to content
OpenAdvisories

Vendor

Cleo

3 known vulnerabilities.

Products

Harmony 2 cleo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-84115

    Cleo Harmony JWT Refresh Token connections privileges management

    A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Performing a manipulation of the argument Bearer results in improper privilege manag…

    Cleo Harmony