PT-2026-42141 · Mesalvo · Meona Server+1

Published 2026-05-20 · Updated 2026-05-20 · CVE-2026-22314

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Meona Client Launcher Component versions prior to 19.06.2020 15:11:49 Meona Server Component versions prior to 2025.04 5+323020

Description Improper Control of Generation of Code, also known as Code Injection, in the Mesalvo Meona Client Launcher and Server components allows for the execution of arbitrary code on the systems of other users.

Recommendations Update Meona Client Launcher Component to a version released after 19.06.2020 15:11:49. Update Meona Server Component to a version released after 2025.04 5+323020.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-22314

Affected Products

Meona Client Launcher

Meona Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-22314 · Security Note
• https://twitter.com/VulmonFeeds/status/2057144804107034938 · Twitter Post
• https://seccore.at/blog/cves-meona · Note
• https://t.me/CVEtracker/54381 · Telegram Post