CVE-2026-122151

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is recommended to address this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. It is recommended to upgrade the affected component.

• CWE-352
• CWE-862

• https://github.com/presenton/presenton/
• https://github.com/presenton/presenton/commit/44c8a61122b21f17642d717b0c4d6f2c54c0f180
• https://github.com/presenton/presenton/issues/975
• https://github.com/presenton/presenton/pull/980
• https://github.com/presenton/presenton/releases/tag/v0.9.12-beta
• https://github.com/user-attachments/files/33003219/default.md
• https://vuldb.com/cve/CVE-2026-122151
• https://vuldb.com/submit/1027429
• https://vuldb.com/vuln/431151
• https://vuldb.com/vuln/431151/cti

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12214A security flaw has been discovered in Qihoo 360 Total Secur…7.8
• CVE-2026-122140Trawl 1.5.0 before 1.10.0 contains a server-side request for…5.8
• CVE-2026-122144A security flaw has been discovered in nliautaud pico-conten…4.3
• CVE-2026-122146A weakness has been identified in 101arrowz fflate up to 0.8…7.3
• CVE-2026-122148In Yealink MeetingBoard Pro before 331.320.0.64, the Web man…8.2
• CVE-2026-12215The OTP Login & Register Woocommerce plugin for WordPress is…5.3
• CVE-2026-122154A vulnerability was found in purocean Yank Note 3.93.0. This…5.3
• CVE-2026-122157A vulnerability was identified in Purocean Yank Note 3.93.0.…6.3
• CVE-2026-122158A security flaw has been discovered in InvoiceShelf up to 2.…4.7
• CVE-2026-122159A weakness has been identified in Edge0-AI Audio8_TTS up to …6.3
• CVE-2026-12216A weakness has been identified in svaarala duktape up to 2.9…5.3
• CVE-2026-122160A security vulnerability has been detected in myshell-ai AIl…6.3