CVE-2026-0856

HIGH

Mesalvo Meona Client Launcher <= 19.06.2020 & Server <= 2025.04 - Improper Access Control

Title source: llm
STIX 2.1

Description

Improper Access Control vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables a normal user gaining access to the admin panel. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

References (1)

Core 1
Core References
Third Party Advisory third-party-advisory
https://seccore.at/blog/cves-meona/

Scores

CVSS v3 7.8
EPSS 0.0013
EPSS Percentile 2.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-284
Status published
Products (2)
Mesalvo/Meona Client Launcher Component < 19.06.2020 15:11:49
Mesalvo/Meona Server Component < 2025.04 5+323020
Published May 20, 2026
Tracked Since May 20, 2026