CVE-2026-22314
⚠️ highSummary
Vendor disputed record. The reported behaviour is documented administrative functionality restricted to dedicated administrative permissions assigned by the operating hospital; its use by a permission holder is not a vulnerability. Unauthorised access to the functions is addressed under CVE-2026-0856. Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' system
Description
Vendor disputed record. The reported behaviour is documented
administrative functionality restricted to dedicated administrative
permissions assigned by the operating hospital; its use by a permission
holder is not a vulnerability. Unauthorised access to the functions is
addressed under CVE-2026-0856.
Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.
📊 Relative Risk Intelligence
This CVE is High Risk - more severe than 76.2% of all 365,620 vulnerabilities in our database.
🎯 CISA SSVC Assessment Updated: May 20, 2026
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H