CVE-2026-24140 | franklioxygen MyTube up to 1.7.78 Setting saveSettings dynamically-determined object attributes (GHSA-c938-x24g-fxcx)

A vulnerability has been found in franklioxygen MyTube up to 1.7.78 and classified as problematic. Impacted is the function saveSettings of the component Setting Handler. Performing a manipulation results in dynamically-determined object attributes.

This vulnerability is known as CVE-2026-24140. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.