franklioxygen MyTube

• CVE-2026-63433 Medium 6.8 MyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Value 0.1%
• CVE-2026-63434 Medium 4.3 MyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning 0.3%
• CVE-2026-62302 High 8.7 MyTube: Unauthenticated Media Access via Static Routes Bypassing Login 0.5%
• CVE-2026-62301 High 7.1 MyTube: Visitor Can Access Hidden Video Metadata and Content 0.4%
• CVE-2026-33935 High 7.7 MyTube has Unauthenticated Account Lockout via Shared Login Attempt State 0.6%
• CVE-2026-33890 High 8.9 MyTube has an Unauthenticated Admin Privilege Escalation via Passkey Registration 0.5%
• CVE-2026-33735 High 7.4 MyTube has an Improper Access Control that Allows Complete Application Takeover 0.4%
• CVE-2026-24140 Low 2.7 MyTube has Mass Assignment via Settings Management 0.3%
• CVE-2026-24139 High 8.7 MyTube Allows Unauthorized Database Export by Guest Users 0.4%
• CVE-2026-23848 Medium 6.5 MyTube has Rate Limiting Bypass via X-Forwarded-For Header Spoofing 0.4%
• CVE-2026-23837 Critical 9.8 MyTube has an Authorization Bypass vulnerability 0.7%