CVE-2026-59507CWE-798hardcoded-credentials

CVE-2026-59507

Critical · published August 13, 2026

CVSS v3.1

9.3

EPSS

Percentile

25.7

In the wild

Unconfirmed

What it is

: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).

This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

The record

Technical detail

CVSS v3.1: 9.3 · CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00335 · 25.7th percentile
Weakness: CWE-798 · Use of Hard-coded Credentials
Published: 2026-08-13T14:17Z

References (1)

https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0 · [email protected]

EPSS history

Timeline

13 AUG 09:44Z
Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control
cvelistv5