EUVD-2026-31092
GHSA-74c8-2c8j-qpj7
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Incorrect Privilege Assignment vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables the export of user data, including cleartext passwords, via the SQL editor. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.
AnalysisAI
Privilege misassignment in Mesalvo Meona Client Launcher and Server components allows authenticated high-privilege users to abuse the built-in SQL editor to exfiltrate user records - including cleartext-stored passwords - from the application backend. The flaw affects Meona Client Launcher up to build dated 19.06.2020 15:11:49 and Meona Server Component up to 2025.04 5+323020. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
24 hours: Identify all systems running Mesalvo Meona Client Launcher (build 19.06.2020 15:11:49 or earlier) and Meona Server Component (version 2025.04 5+323020 or earlier); review administrative audit logs for SQL editor usage by high-privilege accounts. 7 days: Disable or strictly limit SQL editor access to essential administrators only; force password resets for all user accounts managed by affected Meona instances; document current privileged account assignments. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today