This vulnerability (CVE-2026-12692) in Vimesoft Inc. Enterprise Video Platform is classified as CWE-620 (Unverified Password Change). It enables an attacker to bypass authentication by changing a password without proper verification. The affected versions include 3.11.0.0 through versions prior to 3.25.0. The CVSS 3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation allows an attacker to bypass authentication controls by changing passwords without verification, potentially gaining unauthorized access with full control over the affected Enterprise Video Platform. This compromises confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected platform and monitor for suspicious activity related to password changes.