CVE-2026-84114

Cleo Harmony versions up to 5.8.1.10 contain an improper authentication vulnerability in the SAML Authentication component, specifically in the function LocalUserUtil.getNativeUserByAssertions . Manipulation of the Email argument allows a remote attacker with low privileges to bypass authenticati...