CVE-2026-120191: Presenton API missing authentication

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
Public exploit or detection template: none known
Published: 2026-11-01 · updated 2026-11-01
Weakness: CWE-287

Description

A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.

Affected products

presenton: 0.9.11-beta

References

https://github.com/presenton/presenton/
https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180
https://github.com/presenton/presenton/issues/972
https://github.com/presenton/presenton/pull/980
https://github.com/presenton/presenton/releases/tag/v0.9.12-beta
https://vuldb.com/cve/CVE-2026-120191
https://vuldb.com/submit/1027384
https://vuldb.com/vuln/429530
https://vuldb.com/vuln/429530/cti

Get alerted when CVE-2026-120191 or the next vulnerability affects your stack