CVE-2026-12691
Deferred Deferred - Pending Action

Authentication Bypass in Vimesoft Enterprise Video Platform

Publication date: 2026-07-17

Last updated on: 2026-07-17

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
Missing authentication for critical function vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-17
Last Modified
2026-07-17
Generated
2026-07-17
AI Q&A
2026-07-17
EPSS Evaluated
N/A
NVD
CVE-2026-12691
EUVD
EUVD-2026-45219

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vimesoft_inc enterprise_video_platform From 3.11.0.0 (inc) to 3.25.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authentication bypass issue in Vimesoft Inc.'s Enterprise Video Platform. It allows unauthorized access to critical functions without proper authentication, potentially letting attackers perform actions they shouldn't be able to.

Impact Analysis

An attacker could exploit this to access sensitive video data, modify platform settings, or disrupt services. Since the platform is used for enterprise communication, this could lead to data breaches or operational disruptions.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR or HIPAA by allowing unauthorized access to sensitive data. Organizations using this platform may face legal penalties or reputational damage if data is exposed.

Mitigation Strategies

Update Enterprise Video Platform to version 3.25.0 or later to address the missing authentication issue. Ensure network segmentation to limit exposure of the platform. Monitor for unauthorized access attempts or unusual activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12691. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart