Vulnary
← back to the feed
Critical· 9.8

CVE-2026-12692

CVE-2026-12692 is a critical vulnerability (CVSS 9.8) in Vimesoft Inc. Enterprise Video Platform. It allows attackers to bypass authentication by exploiting an unverified password change process. The flaw affects versions from 3.11.0.0 up to but not including 3.25.0, with no official fix available yet.

publishedJul 17, 2026
last modifiedJul 17, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
27th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Sep 1, 2026

No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.

01

Who is affected

Vimesoft Inc. Enterprise Video Platform versions 3.11.0.0 to 3.24.0

02

Real-world impact

Authentication bypass could lead to unauthorized access or control of the system

03

Why this severity

CVSS 9.8 (critical): High confidence in exploitation, high impact on confidentiality, integrity, and availability

04

What to do about it

no official fix yet
recommended steps
  1. 01Upgrade to version 3.25.0 or later when available
  2. 02Apply vendor-recommended mitigations if no patch exists
interim mitigations
  • ›Restrict access to password change functionality
  • ›Monitor for suspicious authentication attempts

Based on NVD description and CVE details. No CISA KEV or public exploit reported.

05

Timeline

06

How it’s attacked

Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07

References & advisories

NVD advisory ↗Search advisories ↗
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →