<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: franklioxygen-mytube</title><description>Every new CVE for franklioxygen-mytube.</description><link>https://agentprime.io/</link><item><title>CVE-2026-63433: MyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Value</title><link>https://agentprime.io/advisories/CVE-2026-63433/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63433/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 19:52:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63434: MyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning</title><link>https://agentprime.io/advisories/CVE-2026-63434/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63434/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 19:51:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62302: MyTube: Unauthenticated Media Access via Static Routes Bypassing Login</title><link>https://agentprime.io/advisories/CVE-2026-62302/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62302/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 19:29:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62301: MyTube: Visitor Can Access Hidden Video Metadata and Content</title><link>https://agentprime.io/advisories/CVE-2026-62301/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62301/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 19:26:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33935: MyTube has Unauthenticated Account Lockout via Shared Login Attempt State</title><link>https://agentprime.io/advisories/CVE-2026-33935/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33935/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 00:43:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33890: MyTube has an Unauthenticated Admin Privilege Escalation via Passkey Registration</title><link>https://agentprime.io/advisories/CVE-2026-33890/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33890/</guid><description>CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 00:38:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33735: MyTube has an Improper Access Control that Allows Complete Application Takeover</title><link>https://agentprime.io/advisories/CVE-2026-33735/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33735/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 00:36:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24140: MyTube has Mass Assignment via Settings Management</title><link>https://agentprime.io/advisories/CVE-2026-24140/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24140/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jan 2026 23:59:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24139: MyTube Allows Unauthorized Database Export by Guest Users</title><link>https://agentprime.io/advisories/CVE-2026-24139/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24139/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jan 2026 23:55:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-23848: MyTube has Rate Limiting Bypass via X-Forwarded-For Header Spoofing</title><link>https://agentprime.io/advisories/CVE-2026-23848/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-23848/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Jan 2026 20:34:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-23837: MyTube has an Authorization Bypass vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-23837/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-23837/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Jan 2026 20:09:37 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>