CVE-2026-12694: Vimesoft Inc Enterprise Video Platform

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.

Affected products

• Vimesoft Inc Enterprise Video Platform: from 3.11.0.0, before 3.25.0 (fixed in 3.25.0)

Published 2026-07-17. Last modified 2026-07-17.