CVE-2026-59503

: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0

Configurations

No configuration.

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) : Exposición de Información Sensible a un Actor No Autorizado : Exposición de Información Personal Privada a un Actor No Autorizado vulnerabilidad en el complemento Priority Portal Generator para Priority ERP (desarrollado por Soft Solutions). Este problema afecta al complemento Portal Generator para Priority ERP (desarrollado por Soft Solutions): Todas las versiones sin Priwall v3.

Information

Published : 2026-08-13 10:17

Updated : 2026-10-24 16:10

NVD link : CVE-2026-59503

Mitre link : CVE-2026-59503

CVE.ORG link : CVE-2026-59503

JSON object : View

Products Affected

No product.

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2026-59503", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-59503", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-13T14:31:55.526199Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@cyber.gov.il", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cna@cyber.gov.il", "affectedData": [{"vendor": "Priority", "product": "Portal Generator addon to Priority ERP (developed by Soft Solutions)", "versions": [{"status": "affected", "version": "All versions without Priwall v3"}], "defaultStatus": "affected"}]}], "published": "2026-08-13T10:17:15.380", "references": [{"url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0", "source": "cna@cyber.gov.il"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@cyber.gov.il", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": ": Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3."}, {"lang": "es", "value": ": Exposici\u00f3n de Informaci\u00f3n Sensible a un Actor No Autorizado : Exposici\u00f3n de Informaci\u00f3n Personal Privada a un Actor No Autorizado vulnerabilidad en el complemento Priority Portal Generator para Priority ERP (desarrollado por Soft Solutions).\n\nEste problema afecta al complemento Portal Generator para Priority ERP (desarrollado por Soft Solutions): Todas las versiones sin Priwall v3."}], "lastModified": "2026-10-24T16:10:00.153", "sourceIdentifier": "cna@cyber.gov.il"}