The vulnerability identified as CVE-2026-12691 affects Vimesoft Inc.'s Enterprise Video Platform. It is classified as CWE-306, indicating missing authentication for a critical function. This flaw allows an attacker to bypass authentication controls, potentially gaining unauthorized access. The affected versions include 3.11.0.0 through versions prior to 3.25.0. The CVSS v3.1 base score is 7.5, reflecting a network attack vector with no required privileges or user interaction, and high confidentiality impact. There is no vendor advisory or patch available at this time, and the product is not a cloud service.

An attacker can bypass authentication mechanisms in the affected versions of the Enterprise Video Platform, potentially gaining unauthorized access to sensitive functions or data. The confidentiality impact is high, but integrity and availability impacts are not indicated. This could lead to unauthorized disclosure of information within the platform.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently documented, organizations should monitor vendor communications for updates. Until a patch is available, restrict access to the affected versions and consider additional access controls to mitigate unauthorized access risks.