CVE-2026-59506: Priority – CWE-306: Missing Authentication for Critical Function

Severity: critical (CVSS 9.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-13 · updated 2026-10-24
Weakness: CWE-306

Description

: Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

Affected products

Priority Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3

References

https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0

Get alerted when CVE-2026-59506 or the next vulnerability affects your stack