Skip to main content

Priority Portal Generator CVE-2026-59502

| EUVDEUVD-2026-57769 MEDIUM
Observable Discrepancy (CWE-203)
2026-08-13 INCD GHSA-675v-7q85-gw28
Information Disclosure Portal Generator Addon To Priority Erp Developed By Soft Solutions
5.3
CVSS 3.1 · Vendor: INCD
Share

Severity by source

Vendor (INCD) PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
vuln.today AI
5.3 MEDIUM

Public portal surface requires no authentication; discrepancy leaks limited enumerable data only, with no integrity or availability impact warranting higher scores.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (INCD).

CVSS VectorVendor: INCD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
Analysis Generated
Aug 13, 2026 - 10:16 vuln.today

DescriptionCVE.org

CWE-203: Observable Discrepancy

AnalysisAI

Observable discrepancy exposure in the Priority Portal Generator Addon to Priority ERP (developed by Soft Solutions) enables unauthenticated remote attackers to enumerate internal state through differential system responses. Reported by the Israeli National Cyber Directorate (INCD), the flaw carries a CVSS 3.1 score of 5.3 (Medium) with a fully unauthenticated, low-complexity network attack vector. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No special conditions beyond network connectivity to the Priority Portal Generator Addon's web interface are required - the CVSS vector AV:N/AC:L/PR:N/UI:N confirms default-configuration, unauthenticated, remote exploitation with no user interaction. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N characterizes this as a medium-severity, fully remote, unauthenticated information disclosure requiring no special conditions - a real but bounded exposure. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation No exact fix version is available from the provided data; administrators should contact Soft Solutions directly and monitor the INCD advisory at https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0 for patch availability. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Portal Generator Addon To Priority Erp Developed By Soft Solutions

View all
CVE-2026-59500 CRITICAL
10.0 Aug 13

Authentication bypass in the Priority Portal Generator add-on for Priority ERP (developed by Soft Solutions) lets remote
CVE-2026-59506 CRITICAL
9.3 Aug 13

Authentication bypass in the Portal Generator Addon (developed by Soft Solutions) for Priority ERP allows remote, unauth
CVE-2026-59507 CRITICAL
9.3 Aug 13

Authentication bypass via hard-coded credentials in the Portal Generator add-on for Priority ERP (developed by Soft Solu
CVE-2026-59504 CRITICAL
9.1 Aug 13

Unauthenticated information disclosure in the Portal Generator add-on to Priority ERP (developed by Soft Solutions) allo
CVE-2026-59503 CRITICAL
9.1 Aug 13

Unauthenticated sensitive information disclosure in the Portal Generator Addon to Priority ERP (developed by Soft Soluti
CVE-2026-59505 HIGH
8.6 Aug 13

Unauthenticated authentication bypass in the Portal Generator Addon to Priority ERP (developed by Soft Solutions) allows
CVE-2026-59499 HIGH
8.6 Aug 13

Unauthenticated remote information disclosure in the Portal Generator Addon for Priority ERP (developed by Soft Solution
CVE-2026-59501 HIGH
8.2 Aug 13

Unauthenticated remote access control bypass in the Portal Generator Addon for Priority ERP (developed by Soft Solutions

Same weakness CWE-203 – Observable Discrepancy

View all
CVE-2017-5753 MEDIUM POC
5.6
CVE-2017-13099 HIGH POC
7.5
CVE-2017-1000385 MEDIUM POC
5.9
CVE-2017-6168 HIGH POC
7.4
CVE-2017-13098 HIGH POC
7.5
CVE-2017-17427 MEDIUM POC
5.9
CVE-2018-3639 MEDIUM POC
5.5
CVE-2019-25337 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-59502 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy