Vulnerability · Published Nov 1, 2026 · Assigned by VulDB

CVE-2026-120191Presenton API missing authentication

High 7.3

In plain English

A high-severity missing authentication in Presenton. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.8%top 43.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.

Affected products (as reported)

Vendor	Product	Versions
n/a	Presenton	0.9.11-beta

Weakness: CWE-306, CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References

VDB-429530 | Presenton API missing authentication vdb-entry
VDB-429530 | CTI Indicators (IOB, IOC) signature, permissions-required
CVE-2026-120191 | CVE Analysis and Report third-party-advisory
Submit #1027384 | Presenton 0.9.11-beta Missing Authentication for Critical Function third-party-advisory
https://github.com/presenton/presenton/issues/972 exploit, issue-tracking
https://github.com/presenton/presenton/pull/980 issue-tracking, patch
https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180 patch
https://github.com/presenton/presenton/releases/tag/v0.9.12-beta patch
https://github.com/presenton/presenton/ product