CVE-2026-120191 PUBLISHED

Presenton API missing authentication

Assigner: VulDB
Reserved: 31.10.2026 Published: 01.11.2026 Updated: 01.11.2026

A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 6.9

Product Status

Vendor n/a
Product Presenton
Versions
  • Version 0.9.11-beta is affected
  • Version 0.9.12-beta is unaffected

Credits

  • fifker (VulDB User) reporter

References

Problem Types

  • Missing Authentication CWE
  • Improper Authentication CWE