Vulnerability · Published Nov 1, 2026 · Assigned by VulDB

CVE-2026-120192Presenton Desktop Authentication Middleware app_data information disclosure

Medium 5.3

In plain English

A medium-severity information exposure in Presenton. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 58% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.9%top 41.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. The affected component should be upgraded.

Affected products (as reported)

Vendor	Product	Versions
n/a	Presenton	0.9.11-beta

Weakness: CWE-200, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

References

VDB-429531 | Presenton Desktop Authentication Middleware app_data information disclosure vdb-entry
VDB-429531 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-120192 | CVE Analysis and Report third-party-advisory
Submit #1027385 | Presenton 0.9.11-beta Exposure of Sensitive Information to an Unauthorized Actor third-party-advisory
https://github.com/presenton/presenton/issues/973 exploit, issue-tracking
https://github.com/presenton/presenton/pull/980 issue-tracking, patch
https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180 patch
https://github.com/presenton/presenton/releases/tag/v0.9.12-beta patch
https://github.com/presenton/presenton/ product