CVE-2026-12692
CriticalCVSS 9.8Summary
An unverified password change vulnerability in Vimesoft Enterprise Video Platform allows authentication bypass. Affects versions from 3.11.0.0 before 3.25.0.
Risk Assessment
An attacker can take over a user account without knowing the current password, gaining unauthorized access to sensitive data and platform functions.
Recommendation
Immediately upgrade to version 3.25.0 or later, which contains the fix. If upgrade is not possible, restrict access to the password change interface.
Other vulnerabilities in Enterprise Video Platform
See all- CVE-2026-12694Critical
A missing authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows accessing functionality not properly constrained by ACLs. This issue affects versions from 3.11.0.0 before 3.25.0.
- CVE-2026-12693Critical
An authorization bypass vulnerability in Vimesoft Inc. Enterprise Video Platform allows accessing functionality not properly constrained by ACLs through a user-controlled key. The issue affects versions from 3.11.0.0 before 3.25.0.
Original NVD description (English source)
Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.