CVE-2026-22315: Undefined Security Weakness

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-0857: Use of Password Hash With Insufficient Computational Effort

Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA MEONA Server and MEONA Client for user accounts whose password was last set under a version before MEONA 2024.10. MEONA versions before 2024.10 protected stored passwords with SHA-1 versions from October 2015 or stored...

CVE-2026-22314: Improper Control of Generation of Code

Vendor disputed record. The reported behaviour is documented administrative functionality restricted to dedicated administrative permissions assigned by the operating hospital; its use by a permission holder is not a vulnerability. Unauthorised access to the functions is addressed under...

CVE-2026-0856: Improper Access Control

Improper Access Control vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables a normal user gaining access to the admin panel. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+3230...

CVE-2026-25602: Insufficient Verification of Data Authenticity

Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA MEONA Client and MEONA Server. The MEONA Client transmits the recipient address of a feedback report to the MEONA Server, and the server sends the report to the transmitted address instead of the address...