https://patchfirst.co/vendor/cleo/New and newly exploited Cleo CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2024-55956/CVE-2024-55956#kevTue, 17 Dec 2024 00:00:00 GMTCleo · Multiple Products. In CISA KEV since 2024-12-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.0% (higher than 99.84% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2024-50623/CVE-2024-50623#kevFri, 13 Dec 2024 00:00:00 GMTCleo · Multiple Products. In CISA KEV since 2024-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 98.6% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1059