VulnerabilityDeferred

CVE-2026-22314

Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems.

CRITICAL 9.0EPSS 0.39%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.39%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

CVSS 3.1: 9.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
EPSS: 0.39% probability · 32th percentile
CISA KEV: Not listed
Weakness: CWE-94
Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

References

https://seccore.at/blog/cves-meona/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.