CVE-2026-25602

Published: May 20, 2026Modified: Jul 24, 2026Deferred

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 1.8 / Impact: 2.5

Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (Secondary)

Description

Insufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component makes it possible to send messages to any email address. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

Related CWEs

CWE-345

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (1)

https://seccore.at/blog/cves-meona/

Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Timeline

No history available yet.