CVE-2026-59504

Deferred Deferred - Pending Action

Client-Side Security Bypass in Application

Publication date: 2026-08-13

Last updated on: 2026-08-28

Assigner: Israel National Cyber Directorate

Description

: Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-28

Generated

2026-09-02

AI Q&A

2026-08-13

EPSS Evaluated

2026-09-01

NVD

CVE-2026-59504

EUVD

EUVD-2026-57771

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-602	The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

Attack-Flow Graph

Executive Summary

This vulnerability involves a client-side application enforcing security rules that should be handled server-side. This means security decisions are made on the user's device rather than the server, allowing attackers to bypass these controls by modifying client-side logic or requests.

Detection Guidance

This vulnerability involves client-side enforcement of server-side security, which may allow attackers to bypass intended restrictions. Detection requires reviewing application logic and network traffic for improper client-side validation. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to bypass security measures, such as authentication or authorization checks, leading to unauthorized access to sensitive data or actions. The high CVSS score (9.1) indicates a severe risk of data compromise or system manipulation.

Compliance Impact

This vulnerability could lead to unauthorized data access or processing, violating GDPR's data protection principles or HIPAA's security requirements. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Implement server-side validation and enforce security policies on the server rather than relying on client-side checks. Ensure all input is validated and sanitized before processing.

Hi! I’m here to help you understand CVE-2026-59504. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70