CVE-2026-19986

A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the component Event Listener. This manipulation of the argument yt-anti-adblock-detected causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-266
• CWE-285

• https://github.com/xryj920/chrome_extensions/blob/main/AdBlock%20Ltd.%20Adblock%20for%20Youtube%207.2.1%20allows%20persistent%20disabling%20of%20ad%20blocking%20through%20an%20unauthenticated%20DOM%20event
• https://vuldb.com/cve/CVE-2026-19986
• https://vuldb.com/submit/873935
• https://vuldb.com/vuln/391190
• https://vuldb.com/vuln/391190/cti
• https://vuldb.com/submit/873935

Published

Aug 17, 2026

Last Modified

Aug 20, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19980A security flaw has been discovered in GL.iNet A1300, AX1800…7.4
• CVE-2026-19981A weakness has been identified in GL.iNet A1300, AX1800, AXT…7.4
• CVE-2026-19982A security vulnerability has been detected in GL.iNet BE9300…7.4
• CVE-2026-19983A vulnerability was detected in GL.iNet A1300, AX1800, AXT18…8.3
• CVE-2026-19984A flaw has been found in jkawamoto mcp-florence2 up to 0.3.1…6.3
• CVE-2026-19985The Relevanssi – A Better Search plugin for WordPress is vul…6.1
• CVE-2026-19987A security vulnerability has been detected in SourceCodester…5.3
• CVE-2026-19988A vulnerability was detected in Alaev SEO Tools Extension up…4.3
• CVE-2026-1999An incorrect authorization vulnerability was identified in G…6.5
• CVE-2026-19991The UsersWP plugin for WordPress is vulnerable to Arbitrary …8.1
• CVE-2026-19992A flaw has been found in Orange View Limited DualSafe Passwo…3.1
• CVE-2026-19993A vulnerability has been found in Webkul Bagisto up to 2.4.4…4.3