Skip to content
OpenAdvisories
High · 7.3 CVE-2026-8876 EUVD-2026-34162GHSA-ph4h-q38c-6xg4

CVE-2026-8876

Published Jun 3, 2026 · Updated Jun 4, 2026 · Assigned by certcc

Description

Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.

Affected products

VendorProductAffectedFixed
Securly Securly Chrome Extension ≤ 3.0.7 —

References