CVE-2026-122151
Description
A flaw was found in Presenton. Due to improper request handling in the user configuration component, a remote attacker can trick an authenticated user into submitting an unauthorized request. This Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to alter the victim's configuration settings without their knowledge or consent.
Statement
This vulnerability is rated as having a Moderate severity because successful exploitation requires user interaction to deceive an authenticated victim, restricting the blast radius to unauthorized modification of user-specific application preferences rather than broader system compromise. Red Hat enterprise products do not package or distribute Presenton, and typical Red Hat environments are not exposed to this issue.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Access Control,Other
Technical Impact: Gain Privileges or Assume Identity; Varies by Context
An attacker can access any functionality that is inadvertently accessible to the source.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
