CVE-2026-12694
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A missing authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows accessing functionality not properly constrained by ACLs. This issue affects versions from 3.11.0.0 before 3.25.0.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to platform functions, potentially leading to data confidentiality, integrity, or availability breaches.
Recommendation
It is recommended to immediately update the Enterprise Video Platform to version 3.25.0 or later, which includes a fix for the missing authorization issue.
Other vulnerabilities in Enterprise Video Platform
See all- CVE-2026-12693Critical
An authorization bypass vulnerability in Vimesoft Inc. Enterprise Video Platform allows accessing functionality not properly constrained by ACLs through a user-controlled key. The issue affects versions from 3.11.0.0 before 3.25.0.
- CVE-2026-12692Critical
An unverified password change vulnerability in Vimesoft Enterprise Video Platform allows authentication bypass. Affects versions from 3.11.0.0 before 3.25.0.
Original NVD description (English source)
Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.