7.3
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.
Basic Information
ID
CVE-2026-8876
Source
certcc
Published
Jun 3, 2026 at 18:07
Modified
Jun 4, 2026 at 14:20
Affected Product
Vendor
Securly
Product
Securly Chrome Extension
Affected Versions
Securly Securly Chrome Extension 0