Live › vulnerability › CVE-2026-120191
Presenton, an open-source presentation generator, has an API function that does not require authentication. A remote attacker can call it without logging in, and a public exploit has been published.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 01:47 UTC. All times on this page are UTC.
Teams running self-hosted Presenton up to 0.9.11-beta whose API is reachable over the network. The sources do not name the specific endpoint, so unknown whether a default configuration is exposed. Teams not running Presenton, or running a later version, are not affected.
No product ranges from the sources yet.
0.9.11-beta)0.9.12-beta or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.12-beta can resolve this issue. Patch name: 44c8a61122b21f17642d717b0c4d6f2c54c0f180. You should upgrade the affected component.
This page as .md · .json · in your agent: get_signal("CVE-2026-120191")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.