CVE-2024-50623

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 5, 2026 6 articles

VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

94.01%

probability

This CVE has a 94.01% probability of being exploited in the next 30 days.

0% Top 99.9th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-434 · Unrestricted File Upload CWE-664 · Improper Control of a Resource Through its Lifetime CWE-669 · Incorrect Resource Transfer Between Spheres

Exploits & PoC

watchtowrlabs/CVE-2024-50623

Cleo Unrestricted file upload and download PoC (CVE-2024-50623)

verylazytech/CVE-2024-50623

CVE-2024-50623 POC - Cleo Unrestricted file upload and download

iSee857/Cleo-CVE-2024-50623-PoC

Cleo 远程代码执行漏洞批量检测脚本（CVE-2024-50623）

congdong007/CVE-2024-50623-poc

PoC CVE-2024-50623 — congdong007/CVE-2024-50623-poc

4 repos — triés par ⭐ Rechercher sur GitHub ↗

Oracle patches EBS zero-day exploited in Clop data theft attacks

BleepingComputer Oct 05, 2025

Cleo patches critical zero-day exploited in data theft attacks

BleepingComputer Dec 12, 2024

American Airlines subsidiary Envoy confirms Oracle data theft attack

BleepingComputer Oct 17, 2025

Clop exploited Oracle zero-day for data theft since early August

BleepingComputer Oct 07, 2025

Cleo File Transfer Vulnerability Under Exploitation – Patch Pending, Mitigation Urged

TheHackerNews

Harvard investigating breach linked to Oracle zero-day exploit

BleepingComputer Oct 13, 2025

Signal Intelligence

Confidenceⓘ

92%

EPSS 94.01%

Mentions 6

Last Seen Oct 17, 2025

CNA Information

Analyst Note

Article [2] explicitly names CVE-2024-50623 as a 'critical zero-day exploited in data theft attacks' by Clop threat actors. The CVE was published 2024-10-27 and articles confirm active exploitation in the wild, with the patch released simultaneously or immediately after disclosure, meeting the zero-day criteria.