CVE-2026-12693CWE-639

IDOR in Vimesoft's Enterprise Video Platform

Critical · published July 17, 2026

CVSS v3.1
9.4
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-07-17T16:50Z
EPSS history
Timeline
  • 17 JUL 16:50Z
    IDOR in Vimesoft's Enterprise Video Platform
    cvelistv5