Product by Franklioxygen
MyTube
11 known vulnerabilities in MyTube (Franklioxygen), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-62302 | MyTube: Unauthenticated Media Access via Static Routes Bypassing Login | — | |
| Critical | CVE-2026-23837 | MyTube has an Authorization Bypass vulnerability | 9.8 | |
| Critical | CVE-2026-33890 | MyTube has an Unauthenticated Admin Privilege Escalation via Passkey Registration | 9.8 | |
| High | CVE-2026-62301 | MyTube: Visitor Can Access Hidden Video Metadata and Content | — | |
| High | CVE-2026-33935 | MyTube has Unauthenticated Account Lockout via Shared Login Attempt State | 7.5 | |
| High | CVE-2026-33735 | MyTube has an Improper Access Control that Allows Complete Application Takeover | 8.8 | |
| Medium | CVE-2026-63433 | MyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Value | 6.8 | |
| High | CVE-2026-24139 | MyTube Allows Unauthorized Database Export by Guest Users | 6.5 | |
| Medium | CVE-2026-63434 | MyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning | 4.3 | |
| Medium | CVE-2026-23848 | MyTube has Rate Limiting Bypass via X-Forwarded-For Header Spoofing | 6.5 | |
| Medium | CVE-2026-24140 | MyTube has Mass Assignment via Settings Management | 2.7 |