CVE-2026-120192 Presenton Desktop Authentication Middleware app_data information disclosure

Medium 6.9 Published Updated
Exploited in the wild
Not known
Fix
None listed

What is CVE-2026-120192?

CVE-2026-120192 is a medium-severity vulnerability in Presenton, published on 1 Nov 2026.

Official description

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. The affected component should be upgraded.

Weakness: CWE-284, CWE-200

Which versions are affected by CVE-2026-120192?

How do I fix CVE-2026-120192?

No fix has been published for CVE-2026-120192 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-120192 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-120192 exists.

Sources

Also known as GHSA-rgjm-77r7-28xg.

Is CVE-2026-120192 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free