CVE-2026-122151: Presenton User Configuration user-config JSON.parse cross-site request forgery
Published Nov 5, 2026
·Updated
A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is recommended to address this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. It is recommended to upgrade the affected component.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Presentonto a version that resolves this vulnerability.Fixed in 0.9.12-betaPatch 44c8a61122b21f17642d717b0c4d6f2c54c0f180
Event History
Nov 5, 2026
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 AM
DescriptionSeverityWeakness