CVE-2026-120191

medium

Description

A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.

References

https://vuldb.com/vuln/429530/cti

https://vuldb.com/vuln/429530

https://vuldb.com/submit/1027384

https://vuldb.com/cve/CVE-2026-120191

https://github.com/presenton/presenton/releases/tag/v0.9.12-beta

https://github.com/presenton/presenton/pull/980

https://github.com/presenton/presenton/issues/972

https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180

https://github.com/presenton/presenton/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-114750

Details

Source: Mitre, NVD

Published: 2026-11-01

Updated: 2026-11-01

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Severity: High

CVSS v4

Base Score: 6.9

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.00803