Cleo Harmony 5.8.1.11 Security Update: Portal Hardening and SSH FTP SSHA2 Support

Cleo Harmony® 5.8.1 Release Update: Key Information Summary Vulnerability Overview Version: Cleo Harmony® 5.8.1.11 Type: Security Update (Security - Portal) Description: This update contains security-related improvements. To protect customers, Cleo does not publicly disclose all details of security updates. For critical security updates or known vulnerabilities, Cleo will issue security bulletins to notify customers. Scope of Impact Affected Components: - Portal: Security-related improvements (specific details not disclosed). - Framework: - Optimized the transfer log database purge SQL statement to reduce CPU usage. - Added a new system setting : - When set to true, this setting excludes database payload tables from the purge SQL statement (if the database payload feature was previously enabled but subsequently disabled). - This setting can be added to the file for each VersaLex installation. - Note: This setting may remove payloads in the database that have not yet been sent or received; use with caution. - Added a default proxy reference for client-owned proxy identifiers in the Proxys REST API, and automatically migrated to ID-based references. - SSH FTP: - Added support for the following SFTP key exchange algorithms on both server and client: - - - - Framework (Bug Fixes): - Fixed an issue related to configuring the user's home directory using a UNC path containing underscores (e.g., ), and applied to all remaining areas. - SSH FTP (Bug Fixes): - Fixed an issue in the FIPS version where the key exchange algorithm failed when the server's public key signature algorithm was ECDSA or Ed25519. Remediation Upgrade to version 5.8.1.11: - This version has Limited availability and a Restricted release type, released on May 15, 2026. - Customers are advised to keep their product up to date and apply updates promptly to avoid delays. - For critical security updates or known vulnerabilities, Cleo will issue security bulletins to notify customers. POC Code or Exploit Code The page does not contain specific POC code or exploit code.

Goal Reached Thanks to every supporter — we hit 100%!

Cleo Harmony 5.8.1.11 Security Update: Portal Hardening and SSH FTP SSHA2 Support