CVE-2026-59507

: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

CVSS v3 9.3 CRITICAL

9.3^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0

Configurations

No configuration.

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) : Uso de Credenciales Codificadas de Forma Rígida : Exposición de Información Sensible a un Actor No Autorizado : Vulnerabilidad de Control de Acceso Inadecuado en el complemento Priority Portal Generator para Priority ERP (desarrollado por Soft Solutions). Este problema afecta al complemento Portal Generator para Priority ERP (desarrollado por Soft Solutions): Todas las versiones sin Priwall v3.

Information

Published : 2026-08-13 10:17

Updated : 2026-10-24 16:10

NVD link : CVE-2026-59507

Mitre link : CVE-2026-59507

CVE.ORG link : CVE-2026-59507

JSON object : View

Products Affected

No product.

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2026-59507", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-59507", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T14:40:26.522268Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@cyber.gov.il", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cna@cyber.gov.il", "affectedData": [{"vendor": "Priority", "product": "Portal Generator addon to Priority ERP (developed by Soft Solutions)", "versions": [{"status": "affected", "version": "All versions without Priwall v3"}], "defaultStatus": "affected"}]}], "published": "2026-08-13T10:17:15.963", "references": [{"url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0", "source": "cna@cyber.gov.il"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@cyber.gov.il", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": ": Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3."}, {"lang": "es", "value": ": Uso de Credenciales Codificadas de Forma R\u00edgida : Exposici\u00f3n de Informaci\u00f3n Sensible a un Actor No Autorizado : Vulnerabilidad de Control de Acceso Inadecuado en el complemento Priority Portal Generator para Priority ERP (desarrollado por Soft Solutions).\n\nEste problema afecta al complemento Portal Generator para Priority ERP (desarrollado por Soft Solutions): Todas las versiones sin Priwall v3."}], "lastModified": "2026-10-24T16:10:00.153", "sourceIdentifier": "cna@cyber.gov.il"}