CVE-2026-0857

Cleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

CVSS v3 6.0 MEDIUM

6.0^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://seccore.at/blog/cves-meona/

Configurations

No configuration.

History

No history.

Information

Published : 2026-05-20 11:16

Updated : 2026-07-24 10:10

NVD link : CVE-2026-0857

Mitre link : CVE-2026-0857

CVE.ORG link : CVE-2026-0857

JSON object : View

Products Affected

No product.

CWE

CWE-316

Cleartext Storage of Sensitive Information in Memory

{"id": "CVE-2026-0857", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0857", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-20T12:01:24.904395Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 1.5}]}, "affected": [{"source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "affectedData": [{"vendor": "Mesalvo", "product": "Meona Client Launcher Component", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "19.06.2020 15:11:49"}], "defaultStatus": "unaffected"}, {"vendor": "Mesalvo", "product": "Meona Server Component", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2025.04 5+323020"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-20T11:16:25.923", "references": [{"url": "https://seccore.at/blog/cves-meona/", "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "description": [{"lang": "en", "value": "CWE-316"}]}], "descriptions": [{"lang": "en", "value": "Cleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component.\n\nThis issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020."}, {"lang": "es", "value": "Vulnerabilidad de almacenamiento en texto claro de informaci\u00f3n sensible en memoria en el Componente Lanzador de Cliente Mesalvo Meona, Componente de Servidor Mesalvo Meona.\n\nEste problema afecta al Componente Lanzador de Cliente Meona: hasta 19.06.2020 15:11:49; Componente de Servidor Meona: hasta 2025.04 5+323020."}], "lastModified": "2026-07-24T10:10:00.197", "sourceIdentifier": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"}