CVE-2026-122151

Medium

Description

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is recommended to address this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. It is recommended to upgrade the affected component.

SeverityMedium

CVSS4.3

Exploit probability10. percentile0.2%

ProductPresenton

PublishedNov 5, 2026

First seenNov 5, 2026

Weakness typeCWE-352Cross-site request forgery (CSRF)CWE-862Missing authorization

How to fix

Patches

Affected products

Product	Affected versions	Fixed in
presenton presenton	0.9.11-beta	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.