CVE-2026-120192

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-120192", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-10-31T08:20:47.301Z", "datePublished": "2026-11-01T01:45:24.422Z", "dateUpdated": "2026-11-02T14:40:48.406Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-11-01T01:45:24.422Z"}, "title": "Presenton Desktop Authentication Middleware app_data information disclosure", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "Information Disclosure"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-284", "lang": "en", "description": "Improper Access Controls"}]}], "affected": [{"vendor": "n/a", "product": "Presenton", "versions": [{"version": "0.9.11-beta", "status": "affected"}, {"version": "0.9.12-beta", "status": "unaffected"}], "cpes": ["cpe:2.3:a:presenton:presenton:*:*:*:*:*:*:*:*"], "modules": ["Desktop Authentication Middleware"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. The affected component should be upgraded."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-10-31T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-10-31T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-10-31T09:26:50.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "fifker (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/429531", "name": "VDB-429531 | Presenton Desktop Authentication Middleware app_data information disclosure", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/429531/cti", "name": "VDB-429531 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-120192", "name": "CVE-2026-120192 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/1027385", "name": "Submit #1027385 | Presenton 0.9.11-beta Exposure of Sensitive Information to an Unauthorized Actor", "tags": ["third-party-advisory"]}, {"url": "https://github.com/presenton/presenton/issues/973", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/presenton/presenton/pull/980", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180", "tags": ["patch"]}, {"url": "https://github.com/presenton/presenton/releases/tag/v0.9.12-beta", "tags": ["patch"]}, {"url": "https://github.com/presenton/presenton/", "tags": ["product"]}], "tags": ["x_open-source"], "x_generator": ["VulDB PVTS v202611"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-02T14:40:34.648686Z", "id": "CVE-2026-120192", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T14:40:48.406Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-120192", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-02T14:40:34.648686Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T14:40:41.030Z"}}], "cna": {"tags": ["x_open-source"], "title": "Presenton Desktop Authentication Middleware app_data information disclosure", "credits": [{"lang": "en", "type": "reporter", "value": "fifker (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:presenton:presenton:*:*:*:*:*:*:*:*"], "vendor": "n/a", "modules": ["Desktop Authentication Middleware"], "product": "Presenton", "versions": [{"status": "affected", "version": "0.9.11-beta"}, {"status": "unaffected", "version": "0.9.12-beta"}]}], "timeline": [{"lang": "en", "time": "2026-10-31T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-10-31T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-10-31T09:26:50.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/429531", "name": "VDB-429531 | Presenton Desktop Authentication Middleware app_data information disclosure", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/429531/cti", "name": "VDB-429531 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-120192", "name": "CVE-2026-120192 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/1027385", "name": "Submit #1027385 | Presenton 0.9.11-beta Exposure of Sensitive Information to an Unauthorized Actor", "tags": ["third-party-advisory"]}, {"url": "https://github.com/presenton/presenton/issues/973", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/presenton/presenton/pull/980", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180", "tags": ["patch"]}, {"url": "https://github.com/presenton/presenton/releases/tag/v0.9.12-beta", "tags": ["patch"]}, {"url": "https://github.com/presenton/presenton/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202611"], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. The affected component should be upgraded."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "Information Disclosure"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "Improper Access Controls"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-11-01T01:45:24.422Z"}}}, "cveMetadata": {"cveId": "CVE-2026-120192", "state": "PUBLISHED", "dateUpdated": "2026-11-02T14:40:48.406Z", "dateReserved": "2026-10-31T08:20:47.301Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-11-01T01:45:24.422Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:presenton:presenton:*:*:*:*:*:*:*:*"], "modules": ["Desktop Authentication Middleware"], "product": "Presenton", "vendor": "n/a", "versions": [{"status": "affected", "version": "0.9.11-beta"}, {"status": "unaffected", "version": "0.9.12-beta"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. The affected component should be upgraded."}], "id": "CVE-2026-120192", "lastModified": "2026-11-02T16:19:19.997", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-120192", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-02T14:40:34.648686Z", "version": "2.0.3"}}]}, "published": "2026-11-01T02:16:59.980", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/"}, {"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180"}, {"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/issues/973"}, {"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/pull/980"}, {"source": "cna@vuldb.com", "url": "https://github.com/presenton/presenton/releases/tag/v0.9.12-beta"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-120192"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/1027385"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/429531"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/429531/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-284"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.9.11-beta"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "0.9.12-beta"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Presenton", "source": "cna", "vendor": "n/a"}, "product": "presenton", "vendor": "presenton"}], "created": "2026-11-01T03:30:16.378110+00:00", "updated": "2026-11-01T03:45:14.417396+00:00", "vendors": ["presenton", "presenton$PRODUCT$presenton"]}