Mesalvo

Products

ProductCVEsExploitedLatest
Meona Client3–May 20, 2026
Meona Server3–May 20, 2026

Exploited and recent CVEs

  • CVE-2026-25602 Low 2.3 Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server). The MEONA Client transmits the recipient address of a feedback report to the M <0.1%
  • CVE-2026-25602 Low 2.3 Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server). The MEONA Client transmits the recipient address of a feedback report to the M <0.1%
  • CVE-2026-0857 Medium 4.4 Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set under a version before MEONA 2024.10. MEONA 0.1%
  • CVE-2026-0857 Medium 4.4 Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set under a version before MEONA 2024.10. MEONA 0.1%
  • CVE-2026-0856 High 7.8 Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEONA Client (admin panel). The MEON 0.1%
  • CVE-2026-0856 High 7.8 Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEONA Client (admin panel). The MEON 0.1%