Product by Franklioxygen

    MyTube

    11 known vulnerabilities in MyTube (Franklioxygen), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in MyTube (Franklioxygen)
    HighCVE-2026-62302

    MyTube: Unauthenticated Media Access via Static Routes Bypassing Login

    —
    CriticalCVE-2026-23837

    MyTube has an Authorization Bypass vulnerability

    9.8
    CriticalCVE-2026-33890

    MyTube has an Unauthenticated Admin Privilege Escalation via Passkey Registration

    9.8
    HighCVE-2026-62301

    MyTube: Visitor Can Access Hidden Video Metadata and Content

    —
    HighCVE-2026-33935

    MyTube has Unauthenticated Account Lockout via Shared Login Attempt State

    7.5
    HighCVE-2026-33735

    MyTube has an Improper Access Control that Allows Complete Application Takeover

    8.8
    MediumCVE-2026-63433

    MyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Value

    6.8
    HighCVE-2026-24139

    MyTube Allows Unauthorized Database Export by Guest Users

    6.5
    MediumCVE-2026-63434

    MyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning

    4.3
    MediumCVE-2026-23848

    MyTube has Rate Limiting Bypass via X-Forwarded-For Header Spoofing

    6.5
    MediumCVE-2026-24140

    MyTube has Mass Assignment via Settings Management

    2.7

    All products by Franklioxygen