Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority based on the reported functionality projecting intended administrative
functionality.
Published: 2026-05-20
Score: n/a
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References

No reference.

History

Tue, 13 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-94
References
Metrics cvssV3_1

{'score': 7.9, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H'}

Tue, 13 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description Vendor disputed record. The reported behaviour is documented administrative functionality restricted to dedicated administrative permissions assigned by the operating hospital; its use by a permission holder is not a vulnerability. Unauthorised access to the functions is addressed under CVE-2026-0856. Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority based on the reported functionality projecting intended administrative functionality.

Fri, 02 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Improper Control of Code Generation in Mesalvo Meona Components Enables Remote Code Execution

Thu, 01 Oct 2026 19:45:00 +0000

Type Values Removed Values Added
Description Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020. Vendor disputed record. The reported behaviour is documented administrative functionality restricted to dedicated administrative permissions assigned by the operating hospital; its use by a permission holder is not a vulnerability. Unauthorised access to the functions is addressed under CVE-2026-0856. Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

Sat, 26 Sep 2026 07:30:00 +0000

Type Values Removed Values Added
Title Code Injection Vulnerability in Mesalvo Meona Components Allowing Remote Code Execution

Fri, 25 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
References

Fri, 25 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
References

Fri, 25 Sep 2026 14:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'}

 cvssV3_1

{'score': 7.9, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H'}

Thu, 21 May 2026 08:45:00 +0000

Type Values Removed Values Added
First Time appeared Mesalvo
Mesalvo meona Client Launcher Component
Mesalvo meona Server Component
Vendors & Products Mesalvo
Mesalvo meona Client Launcher Component
Mesalvo meona Server Component

Wed, 20 May 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 20 May 2026 12:45:00 +0000

Type Values Removed Values Added
Title Code Injection Vulnerability in Mesalvo Meona Components Allowing Remote Code Execution

Wed, 20 May 2026 11:15:00 +0000

Type Values Removed Values Added
Description Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.
Weaknesses CWE-94
References
Metrics cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'}

Subscriptions

Mesalvo Meona Client Launcher Component Meona Server Component
cve-icon MITRE

Status: REJECTED

Assigner: ENISA

Published:

Updated: 2026-10-13T13:56:38.393Z

Reserved: 2026-01-07T09:31:00.563Z

Link: CVE-2026-22314

cve-icon Vulnrichment

Updated:

cve-icon NVD

Status : Rejected

Published: 2026-05-20T11:16:26.057

Modified: 2026-10-13T14:17:38.270

Link: CVE-2026-22314

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.