Medium severity4.4NVD Advisory· Published May 20, 2026· Updated May 20, 2026

CVE-2026-25602

Description

Insufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component makes it possible to send messages to any email address. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mesalvo/Meona Client Launcher Componentllm-fuzzy
Range: <= 19.06.2020 15:11:49
Mesalvo/Meona Server Componentllm-fuzzy
Range: <= 2025.04 5+323020

Patches

Vulnerability mechanics

References

seccore.at/blog/cves-meona/nvd

News mentions

No linked articles in our index yet.

cvss	0.286
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000