CVE-2026-12693
CriticalCVSS 9.4Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
An authorization bypass vulnerability in Vimesoft Inc. Enterprise Video Platform allows accessing functionality not properly constrained by ACLs through a user-controlled key. The issue affects versions from 3.11.0.0 before 3.25.0.
Risk Assessment
The organization is at risk of unauthorized access to platform functions, potentially leading to data leakage, system integrity compromise, or privilege escalation.
Recommendation
Immediately upgrade the Enterprise Video Platform to version 3.25.0 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.