---
id: CVE-2026-120191
title: Presenton API missing authentication
summary: >-
  A weakness has been identified in Presenton up to 0.9.11-beta. Affected by
  this issue is some unknown functionality of the component API. This
  manipulation causes missing authentication. It is possible to initiate the
  attack remotely. Th…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-306
  - CWE-287
product: Presenton
affected:
  - Presenton 0.9.11-beta
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-11-02T17:16:55.312809Z'
exploitAvailable: true
published: '2026-11-01'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T17:43:59.670Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-120191'
references:
  - url: 'https://vuldb.com/vuln/429530'
    label: VDB-429530 | Presenton API missing authentication
  - url: 'https://vuldb.com/vuln/429530/cti'
    label: 'VDB-429530 | CTI Indicators (IOB, IOC)'
  - url: 'https://vuldb.com/cve/CVE-2026-120191'
    label: CVE-2026-120191 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1027384'
    label: >-
      Submit #1027384 | Presenton 0.9.11-beta Missing Authentication for
      Critical Function
  - url: 'https://github.com/presenton/presenton/issues/972'
  - url: 'https://github.com/presenton/presenton/pull/980'
  - url: >-
      https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180
  - url: 'https://github.com/presenton/presenton/releases/tag/v0.9.12-beta'
  - url: 'https://github.com/presenton/presenton/'
tags:
  - cve.org
  - exploit-available
epss: 0.00803
epssPercentile: 0.56796
ingestedAt: '2026-11-05T19:30:42.745Z'
---

## Overview

A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.

## Affected

- `Presenton 0.9.11-beta`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.