---
id: CVE-2026-120192
title: Presenton Desktop Authentication Middleware app_data information disclosure
summary: >-
  A security vulnerability has been detected in Presenton up to 0.9.11-beta.
  This affects an unknown part of the file /app_data of the component Desktop
  Authentication Middleware. Such manipulation leads to information disclosure.
  It is po…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-200
  - CWE-284
product: Presenton
affected:
  - Presenton 0.9.11-beta
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-11-02T14:40:34.648686Z'
exploitAvailable: true
published: '2026-11-01'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T14:40:48.406Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-120192'
references:
  - url: 'https://vuldb.com/vuln/429531'
    label: >-
      VDB-429531 | Presenton Desktop Authentication Middleware app_data
      information disclosure
  - url: 'https://vuldb.com/vuln/429531/cti'
    label: 'VDB-429531 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-120192'
    label: CVE-2026-120192 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1027385'
    label: >-
      Submit #1027385 | Presenton 0.9.11-beta Exposure of Sensitive Information
      to an Unauthorized Actor
  - url: 'https://github.com/presenton/presenton/issues/973'
  - url: 'https://github.com/presenton/presenton/pull/980'
  - url: >-
      https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180
  - url: 'https://github.com/presenton/presenton/releases/tag/v0.9.12-beta'
  - url: 'https://github.com/presenton/presenton/'
tags:
  - cve.org
  - exploit-available
epss: 0.00852
epssPercentile: 0.58351
ingestedAt: '2026-11-05T19:30:42.669Z'
---

## Overview

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. The affected component should be upgraded.

## Affected

- `Presenton 0.9.11-beta`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.