CVE-2026-120191: Presenton API missing authentication

Published Nov 1, 2026

Updated

A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.

Event History

Nov 1, 2026

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments should be prioritized for remediation?

Presenton deployments running versions up to 0.9.11-beta should be prioritized, particularly any instance whose API is reachable remotely. The issue can be exploited remotely without authentication, and public exploit availability increases the likelihood of attempted attacks.

What does an attacker need to exploit this issue?

The reported attack can be initiated remotely and does not require privileges or user interaction. The affected API functionality is unspecified in the available information.

Is there a fixed version available?

Yes. Upgrading Presenton to version 0.9.12-beta resolves the issue. The associated patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180.

CVE-2026-120191: Presenton API missing authentication

Event History

Frequently Asked Questions

Which deployments should be prioritized for remediation?

What does an attacker need to exploit this issue?

Is there a fixed version available?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for remediation?

What does an attacker need to exploit this issue?

Is there a fixed version available?