CVE-2026-59503criticalCWE-200

CVE-2026-59503: fallo crítico en Priority Portal Generator addon to Priority…

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Portal Generator addon to Priority ERP

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 0.4%
: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Productos afectados
Priority · Portal Generator addon to Priority ERP (developed by Soft Solutions)
CVEs relacionadas — Priority Portal Generator addon to Priority…

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-59500CRITICALPriority - CWE-287: Improper AuthenticationEPSS 0.5%CVE-2026-59504CRITICALPriority – CWE-602: Client-Side Enforcement of Server-Side SecurityEPSS 0.4%CVE-2026-59506CRITICALPriority – CWE-306: Missing Authentication for Critical FunctionEPSS 0.4%CVE-2026-59505HIGHPriority - CWE-284: Improper Access ControlEPSS 0.4%CVE-2026-59507CRITICALPriority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access ControlEPSS 0.3%CVE-2026-59501HIGHPriority – CWE-284: Improper Access ControlEPSS 0.3%