CVE-2026-12693
CVE-2026-12693 is a critical authorization bypass in Vimesoft Inc. Enterprise Video Platform versions 3.11.0.0 through 3.24.x, allowing attackers to access functionality not properly constrained by ACLs. The vulnerability has a CVSS score of 9.4 and can be exploited remotely without authentication or user interaction.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users of Vimesoft Inc. Enterprise Video Platform from version 3.11.0.0 up to but not including 3.25.0.
Real-world impact
An attacker could bypass access controls and perform unauthorized actions on the platform, potentially leading to data exposure or further compromise.
Why this severity
With a CVSS base score of 9.4 (Critical), the flaw is network‑reachable, requires low attack complexity, no privileges, and no user interaction, while impacting confidentiality and integrity highly and availability low.
What to do about it
- 01No official fix is mentioned in the provided sources; monitor the vendor’s advisories for a future patch.
- ›Apply the principle of least privilege to limit exposure.
- ›Restrict network access to the Enterprise Video Platform to trusted sources only.
Remediation guidance is based on general best practices because the sources do not specify an official patch.