https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:50:12.511020+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33735 CVE-2026-33735 — MyTube has an Improper Access Control that Allows Complete Application Takeover 2026-10-08T16:50:12.512209+00:00

Affected: franklioxygen MyTube

MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.69, an authorization bypass in the `/api/settings/import-database` endpoint allows attackers with low-privilege credentials to upload and replace the application's SQLite database entirely, leading to a full compromise of the application. The bypass is relevant for other POST routes as well. Version 1.8.69 fixes the issue.