VULNERABILITY INTELLIGENCE

CVE-2026-8876

CVSS score7.3 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-06-03
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.

Weakness classification

  • nvd@nist.gov: CWE-798

Primary references