A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://github.com/presenton/presenton/pull/980 issue-tracking, patch
- https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180 patch
- https://github.com/presenton/presenton/releases/tag/v0.9.12-beta patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.9NVD modified 2026-11-01 01:00
Affected (CPE criteria) 1
cpe:2.3:a:presenton:presenton:*:*:*:*:*:*:*:*
References 9
- https://vuldb.com/vuln/429530 vdb-entry
- https://vuldb.com/vuln/429530/cti signature, permissions-required
- https://vuldb.com/cve/CVE-2026-120191 third-party-advisory
- https://vuldb.com/submit/1027384 third-party-advisory
- https://github.com/presenton/presenton/issues/972 exploit, issue-tracking
- https://github.com/presenton/presenton/pull/980 issue-tracking, patch
- https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180 patch
- https://github.com/presenton/presenton/releases/tag/v0.9.12-beta patch
- https://github.com/presenton/presenton/ product