CVE-2026-120191

CVSS 7.3 (high) · published 2026-11-01

A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.

Weakness: CWE-287, CWE-306

Source: NVD CVE-2026-120191

References

• https://github.com/presenton/presenton/
• https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180
• https://github.com/presenton/presenton/issues/972
• https://github.com/presenton/presenton/pull/980
• https://github.com/presenton/presenton/releases/tag/v0.9.12-beta
• https://vuldb.com/cve/CVE-2026-120191
• https://vuldb.com/submit/1027384
• https://vuldb.com/vuln/429530
• https://vuldb.com/vuln/429530/cti

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.