CVE-2026-12694

CriticalCVSS 9.1

Published: 17/07/2026(UTC)Updated: 17/07/2026(UTC)Translated: 18/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

A missing authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows accessing functionality not properly constrained by ACLs. This issue affects versions from 3.11.0.0 before 3.25.0.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to platform functions, potentially leading to data confidentiality, integrity, or availability breaches.

Recommendation

It is recommended to immediately update the Enterprise Video Platform to version 3.25.0 or later, which includes a fix for the missing authorization issue.

Original NVD description (English source)

Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.