[CVE-2026-8876] Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in secur…

Descripción técnica

Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.

Puntuación CVSS

Score: 7.3/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Productos afectados

Securly — Securly

Debilidades (CWE)

CWE-798

Fuente oficial

Publicado en NIST NVD.