CVE-2026-22314

critical · 9

Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

CVSS

0.4%

EPSS (exploit prob.)

33rd

EPSS percentile

2026-05-20

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-94

References

https://seccore.at/blog/cves-meona/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-22314