CVE-2026-8876

Published: Jun 3, 2026Modified: Jul 22, 2026

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.

Affected (1)

Products: Securly: Securly

Securly

1 product

Securly

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Securly Securly	Version 3.0.7

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (1)

https://kb.cert.org/vuls/id/595768

Source: cret@cert.org

Third Party Advisory

Timeline

No history available yet.