Vulnerabilities

TI-2026-10855 CVE-2026-12694 · GHSA-v7ww-6pvf-g5wc

Missing Authorization in Vimesoft's Enterprise Video Platform

MEDIUM 48

Missing Authorization vulnerability in Vimesoft Inc.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00437 Published 2026-07-17 Fixed in 3.25.0 CWE-862

TI-2026-10854 CVE-2026-12693 · GHSA-qfhx-9988-86x5

MEDIUM 49

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00459 Published 2026-07-17 Fixed in 3.25.0 CWE-639

TI-2026-10853 CVE-2026-12692 · GHSA-jwxw-5646-6rgf

MEDIUM 50

Unverified password change vulnerability in Vimesoft Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00643 Published 2026-07-17 Fixed in 3.25.0 CWE-620

TI-2026-10852 CVE-2026-12691 · GHSA-9855-g484-jffw

LOW 39

Missing authentication for critical function vulnerability in Vimesoft Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2026-07-17 Fixed in 3.25.0 CWE-306