PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-120192 Presenton CVE debrief

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue.

Vendor
Presenton
Product
Presenton
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-11-01
Original CVE updated
2026-11-01
Advisory published
2026-11-01
Advisory updated
2026-11-01

Who should care

Defenders responsible for Presenton deployments should assess exposure and prioritize upgrading to version 0.9.12-beta. They should verify the affected component and versions, review remote attack surfaces, and monitor for potential attacks. Security teams and vulnerability management teams should also be aware of this issue and its potential impacts on Presenton deployments, focusing on Desktop Authentication Middleware and information disclosure risks.

Why it matters

Defenders should care about CVE-2026-120192 because it affects Presenton deployments, allowing remote attackers to disclose information. Upgrading to version 0.9.12-beta can mitigate this issue.

  • Verify remote attack surface for Desktop Authentication Middleware
  • Assess exposure of Presenton deployments to information disclosure
  • Prioritize upgrading to version 0.9.12-beta to mitigate this issue

Technical summary

The vulnerability affects an unknown part of the file /app_data of the component Desktop Authentication Middleware in Presenton up to 0.9.11-beta, leading to information disclosure. This issue can be exploited remotely, and upgrading to version 0.9.12-beta can mitigate it. The affected component should be upgraded as per vendor guidance. Defenders should assess exposure and prioritize mitigation efforts based on CVE and NVD information, considering the potential for information disclosure and remote attack vectors.

Defensive priority

Defenders should prioritize upgrading to version 0.9.12-beta to mitigate this issue.

Recommended defensive actions

  • Upgrade to version 0.9.12-beta
  • Verify affected component and versions
  • Monitor for remote attacks
  • Verify remote attack surface for Desktop Authentication Middleware
  • Assess exposure of Presenton deployments to information disclosure
  • Prioritize upgrading to version 0.9.12-beta to mitigate this issue
  • Review compensating controls for exposed systems while remediation is scheduled and verified

Evidence notes

The CVE record and NVD entry provide information about the vulnerability in Presenton up to 0.9.11-beta, affecting an unknown part of the file /app_data of the Desktop Authentication Middleware, leading to information disclosure. Defenders should verify the affected component and versions, assess exposure, and prioritize upgrading to version 0.9.12-beta. Evidence is limited to public CVE and NVD details.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-120192 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-120192

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-120192 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-120192

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.