CVE-2026-59507

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-08-13

Last updated on: 2026-08-28

Assigner: Israel National Cyber Directorate

Description

: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-28

Generated

2026-10-12

AI Q&A

2026-08-13

EPSS Evaluated

2026-10-11

NVD

CVE-2026-59507

EUVD

EUVD-2026-57774

Affected Vendors & Products

Vendor	Product	Version / Range
Priority	Portal	Generator addon to Priority ERP (developed by Soft Solutions) All versions without Priwall v3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves the use of hard-coded credentials and improper access control, which can expose sensitive information to unauthorized users. It may also allow attackers to gain elevated access due to weak authentication mechanisms.

Detection Guidance

This vulnerability involves hard-coded credentials and improper access control, which may not be directly detectable via standard commands. Review source code for hard-coded passwords or API keys. Check configuration files and environment variables for exposed sensitive data. Use static analysis tools to scan for CWE-798, CWE-200, and CWE-284 patterns.

Impact Analysis

An attacker could exploit this to gain unauthorized access to systems or sensitive data, leading to data breaches, system compromise, or further network infiltration. The high CVSS score indicates significant risk.

Compliance Impact

This vulnerability likely violates compliance requirements such as GDPR (data protection) and HIPAA (health data security) due to unauthorized data exposure and weak access controls. Organizations may face penalties or legal consequences.

Mitigation Strategies

Review all code and configurations for hard-coded credentials or sensitive information. Remove or replace any hard-coded credentials with secure alternatives like environment variables or secret management tools. Ensure proper access controls are implemented to restrict unauthorized access to sensitive data.

Hi! I’m here to help you understand CVE-2026-59507. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70