TI-2026-17897 CVE-2026-22314 · GHSA-xcwx-69fp-83wm
Code injection in Mesalvo Meona Client Launcher Component
Priority LOW 36
Vendor disputed record.
No Mesalvo vulnerabilities are listed in CISA KEV.
4 records
Vendor disputed record.
Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEONA Client (admin panel).
Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set under a version before MEONA 2024.10.
Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server).