CVE-2026-59505

Deferred Deferred - Pending Action

Improper Access Control in Product

Publication date: 2026-08-13

Last updated on: 2026-08-28

Assigner: Israel National Cyber Directorate

Description

: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-28

Generated

2026-09-02

AI Q&A

2026-08-13

EPSS Evaluated

2026-09-01

NVD

CVE-2026-59505

EUVD

EUVD-2026-57772

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is classified under CWE-284, which refers to Improper Access Control. This means the system fails to properly restrict access to resources or functions, potentially allowing unauthorized users to perform actions they should not be able to.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive data or system functions. The high CVSS score (8.6) indicates a significant risk, as it can be exploited remotely without authentication, potentially leading to data breaches or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR's data protection principles and HIPAA's security requirements. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Implement strict access controls to restrict unauthorized access. Review and update permissions to ensure least privilege. Monitor network traffic for unusual activity and apply patches if available.

Hi! I’m here to help you understand CVE-2026-59505. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70