What is CVE-2026-22315?

CVE-2026-22315 is a high-severity vulnerability in Mesalvo Meona Client Launcher Component, classified under Incorrect Privilege Assignment. CVSS score: 7.2/10. Published 2026-05-20.

How severe is CVE-2026-22315?

High severity. CVSS v3 base score is 7.2 out of 10.

Privilege escalation in Mesalvo Meona Client Launcher Component

CVE-2026-22315

Incorrect Privilege Assignment vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables the export of user data, including cleartext passwords, via the SQL editor. This issue affects Meona Client La…

EPSS: 0.000 (15.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Mesalvo Meona Client Launcher Component — versions 0
Mesalvo Meona Server Component — versions 0

Weakness classification (CWE)

CWE-266 — Incorrect Privilege Assignment

References

a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (third-party-advisory)

Frequently asked questions

What is CVE-2026-22315?: CVE-2026-22315 is a high-severity vulnerability in Mesalvo Meona Client Launcher Component, classified under Incorrect Privilege Assignment. CVSS score: 7.2/10. Published 2026-05-20.
How severe is CVE-2026-22315?: High severity. CVSS v3 base score is 7.2 out of 10.