CVE-2026-59507criticalCWE-798

CVE-2026-59507: falha crítica em Priority Portal Generator addon to Priority…

Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Portal Generator addon to Priority ERP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.3%
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Produtos afetados
Priority · Portal Generator addon to Priority ERP (developed by Soft Solutions)
CVEs relacionadas — Priority Portal Generator addon to Priority…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-59500CRITICALPriority - CWE-287: Improper AuthenticationEPSS 0.5%CVE-2026-59504CRITICALPriority – CWE-602: Client-Side Enforcement of Server-Side SecurityEPSS 0.4%CVE-2026-59503CRITICALPriority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized ActorEPSS 0.4%CVE-2026-59506CRITICALPriority – CWE-306: Missing Authentication for Critical FunctionEPSS 0.4%CVE-2026-59505HIGHPriority - CWE-284: Improper Access ControlEPSS 0.4%CVE-2026-59501HIGHPriority – CWE-284: Improper Access ControlEPSS 0.3%