CVE-2026-59506

Full vulnerability record from the local CVENow database.

Description

: Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

Severity

CRITICAL

CVSS score

9.3 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-08-13 10:17:15.840000

Last modified

2026-10-24 16:10:00.153000

View original CVE JSON

{
  "id": "CVE-2026-59506",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-13T10:17:15.840",
  "lastModified": "2026-10-24T16:10:00.153",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": ": Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).\n\nThis issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3."
    },
    {
      "lang": "es",
      "value": ": Vulnerabilidad de Falta de Autenticación para Función Crítica en el complemento Priority Portal Generator para Priority ERP (desarrollado por Soft Solutions).\n\nEste problema afecta al complemento Portal Generator para Priority ERP (desarrollado por Soft Solutions): Todas las versiones sin Priwall v3."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Priority",
          "product": "Portal Generator addon to Priority ERP (developed by Soft Solutions)",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "All versions without Priwall v3",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
          "baseScore": 9.3,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 4.7
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-13T14:39:44.295794Z",
          "id": "CVE-2026-59506",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0",
      "source": "[email protected]"
    }
  ]
}