SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-82813

MEDIUM · CVSS 5.4 EPSS 0.15% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-31 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability in the TubeBuddy for YouTube extension for Chrome allows remote attackers to manipulate the TBGlobal.GetToken function in tubebuddymaster1.js, leading to insufficient verification of data authenticity. This could potentially enable unauthorized access or data manipulation. Users and organizations utilizing this extension should prioritize updating to the latest version to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-82813
Severity
MEDIUM
CVSS
5.4
EPSS
0.15%
Chrome

Original NVD Description

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The manipulation of the argument t/c/r results in insufficient verification of data authenticity. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.