CVE-2026-59503CWE-200information-disclosure

CVE-2026-59503

Critical · published August 13, 2026

CVSS v3.1

9.1

EPSS

Percentile

35.9

In the wild

Unconfirmed

What it is

: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).

This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

The record

Technical detail

CVSS v3.1: 9.1 · CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.00427 · 35.9th percentile
Weakness: CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published: 2026-08-13T14:17Z

References (1)

https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0 · [email protected]

EPSS history

Timeline

13 AUG 09:30Z
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
cvelistv5