PT-2026-42142 · Unknown · Meona Server+1

Published 2026-05-20 · Updated 2026-05-20 · CVE-2026-22315

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Meona Client Launcher Component versions prior to 19.06.2020 15:11:49 Meona Server Component versions prior to 2025.04 5+323020

Description An incorrect privilege assignment allows the export of user data, including cleartext passwords, through the SQL editor in the Meona Server Component.

Recommendations Update Meona Client Launcher Component to a version released after 19.06.2020 15:11:49. Update Meona Server Component to a version released after 2025.04 5+323020.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-22315

Affected Products

Meona Client Launcher

Meona Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-22315 · Security Note
• https://twitter.com/VulmonFeeds/status/2057147364033302976 · Twitter Post
• https://t.me/CVEtracker/54382 · Telegram Post
• https://seccore.at/blog/cves-meona · Note