Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://kb.cert.org/vuls/id/595768 |
|
History
Wed, 03 Jun 2026 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-312 CWE-798 |
Wed, 03 Jun 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data. | |
| Title | CVE-2026-8876 | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: certcc
Published:
Updated: 2026-06-03T18:07:13.200Z
Reserved: 2026-05-18T20:27:18.596Z
Link: CVE-2026-8876
No data.
Status : Received
Published: 2026-06-03T19:16:39.233
Modified: 2026-06-03T19:16:39.233
Link: CVE-2026-8876
No data.
OpenCVE Enrichment
Updated: 2026-06-03T20:30:36Z