Priority vulnerabilities

Products

• Portal Generator addon to Priority ERP (developed by Soft Solutions) 9
• Priority for Windows 1
• Priority Web 1

Latest Priority CVEs

Newest publication first

1. CVE-2026-59507 Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control

   Published 2026-08-13

   Critical·CVSS 9.3

   : Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (develo...

2. CVE-2026-59506 Priority – CWE-306: Missing Authentication for Critical Function

   Published 2026-08-13

   Critical·CVSS 9.3

   : Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

3. CVE-2026-59505 Priority - CWE-284: Improper Access Control

   Published 2026-08-13

   High·CVSS 8.6

   : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

4. CVE-2026-59504 Priority – CWE-602: Client-Side Enforcement of Server-Side Security

   Published 2026-08-13

   Critical·CVSS 9.1

   : Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

5. CVE-2026-59503 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

   Published 2026-08-13

   Critical·CVSS 9.1

   : Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority E...

6. CVE-2026-59502 Priority - CWE-203: Observable Discrepancy

   Published 2026-08-13

   Medium·CVSS 5.3

   : Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

7. CVE-2026-59501 Priority – CWE-284: Improper Access Control

   Published 2026-08-13

   High·CVSS 8.2

   : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

8. CVE-2026-59500 Priority - CWE-287: Improper Authentication

   Published 2026-08-13

   Critical·CVSS 10.0

   : Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.

9. CVE-2026-59499 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

   Published 2026-08-13

   High·CVSS 8.6

   : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).. This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions).: All versions without Priwall v3.

10. CVE-2023-23459 Priority Windows – Command Execution via SQL Injection

    Published 2023-02-15

    Critical·CVSS 9.1

    Priority Windows may allow Command Execution via SQL Injection using an unspecified method.

11. CVE-2023-23460 Priority Web – Authentication bypass

    Published 2023-02-15

    Critical·CVSS 9.1

    Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.