SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-12694

CRITICAL · CVSS 9.1 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-07-17 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

A critical missing authorization vulnerability in Vimesoft Inc. Enterprise Video Platform versions prior to 3.25.0 allows unauthorized access to functionalities not properly constrained by access control lists (ACLs). This could lead to significant data exposure or manipulation, making it imperative for organizations using affected versions to prioritize immediate remediation. Users of the Enterprise Video Platform should assess their systems and apply the necessary updates to mitigate potential risks.

CVE
CVE-2026-12694
Severity
CRITICAL
CVSS
9.1
EPSS
0.24%

Original NVD Description

Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.