VulnerabilityDeferred

CVE-2026-25602

Insufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component makes it possible to send messages to any email address.

MEDIUM 4.4EPSS 0.09%

Does this matter?

Lower severity and a low EPSS score (0.09%). Track it; it rarely justifies an emergency change on its own.

Description

Insufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component makes it possible to send messages to any email address. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

CVSS 3.1: 4.4 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS: 0.09% probability · 0th percentile
CISA KEV: Not listed
Weakness: CWE-345
Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

References

https://seccore.at/blog/cves-meona/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.