CVE-2026-12693

Published: Jul 17, 2026Modified: Jul 17, 2026Deferred

9.4

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Exploitability: 3.9 / Impact: 5.5

Source: iletisim@usom.gov.tr (Secondary)

Description

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.

Related CWEs

CWE-639

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0574

Source: iletisim@usom.gov.tr

Timeline

No history available yet.