CVE-2026-12692

CriticalCVSS 9.8

Published: 17/07/2026(UTC)Updated: 17/07/2026(UTC)Translated: 18/07/2026(UTC)NVD NIST

Summary

An unverified password change vulnerability in Vimesoft Enterprise Video Platform allows authentication bypass. Affects versions from 3.11.0.0 before 3.25.0.

Risk Assessment

An attacker can take over a user account without knowing the current password, gaining unauthorized access to sensitive data and platform functions.

Recommendation

Immediately upgrade to version 3.25.0 or later, which contains the fix. If upgrade is not possible, restrict access to the password change interface.

Original NVD description (English source)

Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.