Vulnerabilities

TI-2026-20709 CVE-2026-25602 · GHSA-r47h-9xx2-mw53

Insufficient verification of data authenticity in Mesalvo Meona Server

LOW 11

Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server).

CVSS 3.1LOW 2.3 Local High privileges No interaction EPSS 0.00092 Published 2026-05-20 Fixed in 2025.04.24, 2026.03.02 CWE-345

TI-2026-00638 CVE-2026-0857 · GHSA-49qv-652v-577v

Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA…

LOW 19

Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set under a version before MEONA 2024.10.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00101 Published 2026-05-20 Fixed in 2025.04.24, 2026.03.02 CWE-916

TI-2026-00637 CVE-2026-0856 · GHSA-q549-3jgw-crc8

Improper access control in Mesalvo Meona Client

LOW 35

Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEONA Client (admin panel).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00126 Published 2026-05-20 No fix listed CWE-284

TI-2026-17897 CVE-2026-22314 · GHSA-xcwx-69fp-83wm

Code injection in Mesalvo Meona Client Launcher Component

LOW 36

Vendor disputed record.

CVSS 3.1HIGH 7.9 Adjacent network High privileges User interaction EPSS 0.00278 Published 2026-05-20 No fix listed CWE-94

Vulnerabilities

Filters

Insufficient verification of data authenticity in Mesalvo Meona Server

Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA…

Improper access control in Mesalvo Meona Client

Code injection in Mesalvo Meona Client Launcher Component