PatchSiren cyber security CVE debrief
CVE-2026-120192 Presenton CVE debrief
A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue.
- Vendor
- Presenton
- Product
- Presenton
- CVSS
- MEDIUM 5.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-11-01
- Original CVE updated
- 2026-11-01
- Advisory published
- 2026-11-01
- Advisory updated
- 2026-11-01
Who should care
Defenders responsible for Presenton deployments should assess exposure and prioritize upgrading to version 0.9.12-beta. They should verify the affected component and versions, review remote attack surfaces, and monitor for potential attacks. Security teams and vulnerability management teams should also be aware of this issue and its potential impacts on Presenton deployments, focusing on Desktop Authentication Middleware and information disclosure risks.
Why it matters
Defenders should care about CVE-2026-120192 because it affects Presenton deployments, allowing remote attackers to disclose information. Upgrading to version 0.9.12-beta can mitigate this issue.
- Verify remote attack surface for Desktop Authentication Middleware
- Assess exposure of Presenton deployments to information disclosure
- Prioritize upgrading to version 0.9.12-beta to mitigate this issue
Technical summary
The vulnerability affects an unknown part of the file /app_data of the component Desktop Authentication Middleware in Presenton up to 0.9.11-beta, leading to information disclosure. This issue can be exploited remotely, and upgrading to version 0.9.12-beta can mitigate it. The affected component should be upgraded as per vendor guidance. Defenders should assess exposure and prioritize mitigation efforts based on CVE and NVD information, considering the potential for information disclosure and remote attack vectors.
Defensive priority
Defenders should prioritize upgrading to version 0.9.12-beta to mitigate this issue.
Recommended defensive actions
- Upgrade to version 0.9.12-beta
- Verify affected component and versions
- Monitor for remote attacks
- Verify remote attack surface for Desktop Authentication Middleware
- Assess exposure of Presenton deployments to information disclosure
- Prioritize upgrading to version 0.9.12-beta to mitigate this issue
- Review compensating controls for exposed systems while remediation is scheduled and verified
Evidence notes
The CVE record and NVD entry provide information about the vulnerability in Presenton up to 0.9.11-beta, affecting an unknown part of the file /app_data of the Desktop Authentication Middleware, leading to information disclosure. Defenders should verify the affected component and versions, assess exposure, and prioritize upgrading to version 0.9.12-beta. Evidence is limited to public CVE and NVD details.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-120192 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-120192
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-120192 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-120192
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Source reference
Unverified legacy reference
URL: https://github.com/presenton/presenton/
-
Source reference
Unverified legacy reference
URL: https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180
-
Source reference
Unverified legacy reference
URL: https://github.com/presenton/presenton/issues/973
-
Source reference
Unverified legacy reference
URL: https://github.com/presenton/presenton/pull/980
-
Source reference
Unverified legacy reference
URL: https://github.com/presenton/presenton/releases/tag/v0.9.12-beta
-
Source reference
Unverified legacy reference
URL: https://vuldb.com/cve/CVE-2026-120192
-
Source reference
Unverified legacy reference
URL: https://vuldb.com/submit/1027385
-
Source reference
Unverified legacy reference
URL: https://vuldb.com/vuln/429531
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.