Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This…

High CVSS 7.9

CVECVE-2026-22314

First seen2026-09-25 16:15 UTC

Disclosed2026-05-20 11:16 UTC

Last updated2026-09-25 16:15 UTC

Channel statusauto

Summary

Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://mesalvo.com/en/vdp/advisories/msa-2026-003.pdf

Timeline

2026-09-25 nvd_ingest NVD