CVE-2026-33735 | franklioxygen MyTube up to 1.8.68 Setting import-database improper authorization (GHSA-63cf-662x-crp2 / EUVD-2026-16512)

March 27, 2026 Yanac

A vulnerability categorized as critical has been discovered in franklioxygen MyTube up to 1.8.68. This impacts an unknown function of the file /api/settings/import-database of the component Setting Handler. The manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-33735. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More