Time to patch: Multiple critical vulnerabilities under exploitation

This advisory details multiple critical vulnerabilities actively exploited in the wild — Adobe Commerce CVE-2024-34102 (“CosmicSting”) enabling deserialization/XXE-based RCE and admin takeover, Cleo File Transfer CVE-2024-50623 enabling unauthenticated command execution and observed post-exploitation activity, and Windows LDAP CVE-2024-49112 allowing unauthenticated RCE via integer overflow — lists affected versions, IOCs, exploitation behavior, and recommended mitigations including patching, disabling risky features, and network segmentation.