CVE-2026-59500criticalCWE-287

CVE-2026-59500: falha crítica em Priority Portal Generator addon to Priority…

Priority - CWE-287: Improper Authentication

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Portal Generator addon to Priority ERP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 0.5%
: Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Produtos afetados
Priority · Portal Generator addon to Priority ERP (developed by Soft Solutions)
CVEs relacionadas — Priority Portal Generator addon to Priority…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-59504CRITICALPriority – CWE-602: Client-Side Enforcement of Server-Side SecurityEPSS 0.4%CVE-2026-59503CRITICALPriority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized ActorEPSS 0.4%CVE-2026-59506CRITICALPriority – CWE-306: Missing Authentication for Critical FunctionEPSS 0.4%CVE-2026-59505HIGHPriority - CWE-284: Improper Access ControlEPSS 0.4%CVE-2026-59507CRITICALPriority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access ControlEPSS 0.3%CVE-2026-59501HIGHPriority – CWE-284: Improper Access ControlEPSS 0.3%