CVE-2026-59507
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) involves use of hard-coded credentials, exposure of sensitive information, and improper access control. All versions without Priwall v3 are affected.
Risk Assessment
An attacker can exploit hard-coded credentials to gain access to the system, and may also access sensitive data or functions they are not authorized to use.
Recommendation
Install Priwall v3, change all default credentials, and implement proper access control.
Other vulnerabilities in Priority Portal Generator
See all- CVE-2026-59506Critical
A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) involves missing authentication for critical functions. All versions without Priwall v3 are affected.
- CVE-2026-59504Critical
A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) involves client-side enforcement of server-side security. All versions without Priwall v3 are affected.
- CVE-2026-59503Critical
A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) exposes sensitive personal information to unauthorized actors. All versions without Priwall v3 are affected.
- CVE-2026-59500Critical
A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) involves improper authentication. All versions without Priwall v3 are affected.
- CVE-2026-59505High
Improper Access Control vulnerability in the Portal Generator addon to Priority ERP (developed by Soft Solutions). Affects all versions without Priwall v3.
- CVE-2026-59501High
Improper Access Control vulnerability in the Portal Generator addon to Priority ERP (developed by Soft Solutions). Affects all versions without Priwall v3.
- CVE-2026-59499High
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the Portal Generator addon to Priority ERP (developed by Soft Solutions). Affects all versions without Priwall v3.
Original NVD description (English source)
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS