high
advisory
Presenton: API authentication vulnerability (CVE-2026-120191)
A vulnerability in the Presenton API component (up to version 0.9.11-beta) allows for remote, unauthenticated access.
CVE search metadata
CVE search record: CVE-2026-120191. Severity: high. CVSS: 7.3. KEV: no. Product: Presenton (up to 0.9.11-beta). Brief: Presenton: API authentication vulnerability (CVE-2026-120191). Brief link: https://feed.craftedsignal.io/briefs/2026-11-presenton-auth-bypass/
Triage facts
Revision 1- Applicability
- Presenton (up to 0.9.11-beta)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 1, 02:07 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A weakness has been identified in Presenton versions up to 0.9.11-beta affecting unknown functionality of the component API. This issue results in missing authentication and can be initiated remotely. A public exploit is available. Upgrading to version 0.9.12-beta (patch 44c8a61122b21f17642d717b0c4d6f2c54c0f180) is recommended to resolve this issue.