Authorization Bypass in Vimesoft Inc. Enterprise Video Platform
CVE-2026-12693

9.4CRITICAL

Key Information:

Vendor

Vimesoft Inc.

Status
Enterprise Video Platform
Vendor
CVE Published:
17 July 2026

What is CVE-2026-12693?

A vulnerability affecting the Vimesoft Inc. Enterprise Video Platform allows unauthorized access to functionalities due to improper constraints enforced by Access Control Lists (ACLs). This security flaw enables users to exploit user-controlled keys, bypassing set permissions and gaining access to features they should not be able to access. Versions of the platform from 3.11.0.0 up to 3.25.0 are susceptible to this issue, emphasizing the need for immediate review and remediation in affected environments.

Affected Version(s)

Enterprise Video Platform 3.11.0.0 < 3.25.0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Musa ATALAY
.