This vulnerability (CVE-2026-59504) affects the Portal Generator addon to Priority ERP by Soft Solutions. It is categorized as CWE-602, which means security controls that should be enforced on the server side are instead enforced on the client side, allowing attackers to potentially bypass these controls. The CVSS 3.1 base score is 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N), indicating network attack vector, low complexity, no privileges or user interaction required, unchanged scope, and high confidentiality and integrity impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows an unauthenticated attacker to bypass server-side security controls by exploiting client-side enforcement mechanisms, potentially leading to full compromise of confidentiality and integrity of the affected system. Availability impact is not affected. No known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should monitor vendor communications for updates and consider restricting access to the affected addon where possible.