[CVE-2026-8878] Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that al…

Descripción técnica

Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that are inadequately obfuscated using a simple Caesar cipher, which can be easily reversed to recover the original hash values and access the protected data.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

Securly — Securly

Debilidades (CWE)

CWE-326

Fuente oficial

Publicado en NIST NVD.