CVE-2026-22314

CriticalCVSS 9.0

Published: 20/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

A code injection vulnerability in Meona Client Launcher and Server components allows code execution on other users' systems. Affects versions up to 19.06.2020 15:11:49 (Client Launcher) and up to 2025.04 5+323020 (Server).

Risk Assessment

An attacker can remotely execute arbitrary code on other users' machines, leading to full system compromise and potential lateral movement within the network.

Recommendation

Update Meona components to versions newer than those specified. Implement code integrity checks and restrict trust in user-supplied input.

Original NVD description (English source)

Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.