CVE-2026-120191

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-120191", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-10-31T08:20:34.974Z", "datePublished": "2026-11-01T01:00:26.213Z", "dateUpdated": "2026-11-02T17:43:59.670Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-11-01T01:00:26.213Z"}, "title": "Presenton API missing authentication", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-306", "lang": "en", "description": "Missing Authentication"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-287", "lang": "en", "description": "Improper Authentication"}]}], "affected": [{"vendor": "n/a", "product": "Presenton", "versions": [{"version": "0.9.11-beta", "status": "affected"}, {"version": "0.9.12-beta", "status": "unaffected"}], "cpes": ["cpe:2.3:a:presenton:presenton:*:*:*:*:*:*:*:*"], "modules": ["API"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-10-31T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-10-31T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-10-31T09:25:40.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "fifker (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/429530", "name": "VDB-429530 | Presenton API missing authentication", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/429530/cti", "name": "VDB-429530 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-120191", "name": "CVE-2026-120191 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/1027384", "name": "Submit #1027384 | Presenton 0.9.11-beta Missing Authentication for Critical Function", "tags": ["third-party-advisory"]}, {"url": "https://github.com/presenton/presenton/issues/972", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/presenton/presenton/pull/980", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180", "tags": ["patch"]}, {"url": "https://github.com/presenton/presenton/releases/tag/v0.9.12-beta", "tags": ["patch"]}, {"url": "https://github.com/presenton/presenton/", "tags": ["product"]}], "tags": ["x_open-source"], "x_generator": ["VulDB PVTS v202611"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-02T17:16:55.312809Z", "id": "CVE-2026-120191", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T17:43:59.670Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-120191", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-02T17:16:55.312809Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T17:16:56.069Z"}}], "cna": {"tags": ["x_open-source"], "title": "Presenton API missing authentication", "credits": [{"lang": "en", "type": "reporter", "value": "fifker (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:presenton:presenton:*:*:*:*:*:*:*:*"], "vendor": "n/a", "modules": ["API"], "product": "Presenton", "versions": [{"status": "affected", "version": "0.9.11-beta"}, {"status": "unaffected", "version": "0.9.12-beta"}]}], "timeline": [{"lang": "en", "time": "2026-10-31T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-10-31T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-10-31T09:25:40.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/429530", "name": "VDB-429530 | Presenton API missing authentication", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/429530/cti", "name": "VDB-429530 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-120191", "name": "CVE-2026-120191 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/1027384", "name": "Submit #1027384 | Presenton 0.9.11-beta Missing Authentication for Critical Function", "tags": ["third-party-advisory"]}, {"url": "https://github.com/presenton/presenton/issues/972", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/presenton/presenton/pull/980", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180", "tags": ["patch"]}, {"url": "https://github.com/presenton/presenton/releases/tag/v0.9.12-beta", "tags": ["patch"]}, {"url": "https://github.com/presenton/presenton/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202611"], "descriptions": [{"lang": "en", "value": "A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "Missing Authentication"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "Improper Authentication"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-11-01T01:00:26.213Z"}}}, "cveMetadata": {"cveId": "CVE-2026-120191", "state": "PUBLISHED", "dateUpdated": "2026-11-02T17:43:59.670Z", "dateReserved": "2026-10-31T08:20:34.974Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-11-01T01:00:26.213Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:presenton:presenton:*:*:*:*:*:*:*:*"], "modules": ["API"], "product": "Presenton", "vendor": "n/a", "versions": [{"status": "affected", "version": "0.9.11-beta"}, {"status": "unaffected", "version": "0.9.12-beta"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component."}], "id": "CVE-2026-120191", "lastModified": "2026-11-02T18:18:46.000", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-120191", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-02T17:16:55.312809Z", "version": "2.0.3"}}]}, "published": "2026-11-01T01:17:17.383", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/"}, {"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180"}, {"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/issues/972"}, {"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/pull/980"}, {"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/releases/tag/v0.9.12-beta"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-120191"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/1027384"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/429530"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/429530/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}, {"lang": "en", "value": "CWE-306"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.9.11-beta"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "0.9.12-beta"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Presenton", "source": "cna", "vendor": "n/a"}, "product": "presenton", "vendor": "presenton"}], "created": "2026-11-01T02:45:10.891517+00:00", "updated": "2026-11-01T03:00:13.742387+00:00", "vendors": ["presenton", "presenton$PRODUCT$presenton"]}