Sensitive Information Exposure in Mesalvo Meona Components
CVE-2026-0857

4.4MEDIUM

Key Information:

Vendor

Mesalvo

Status
Meona Client
Meona Server
Vendor
CVE Published:
20 May 2026

What is CVE-2026-0857?

The Mesalvo Meona Client Launcher and Server Components are susceptible to a vulnerability that allows for the cleartext storage of sensitive data in memory. This poses a risk as unauthorized actors may gain access to confidential information stored during execution. Users of the affected versions should review their system configurations and consider implementing security best practices to mitigate potential data exposure.

Affected Version(s)

Meona Client 2024.10

Meona Client 2025.04 < 2025.04.24

Meona Client 2026.03 < 2026.03.02

References

https://mesalvo.com/en/vdp/advisories/msa-2026-002.pdf
vendor-advisory

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.