CVE-2026-8876

CVSS 3.1: 7.3 high
EPSS: <1%p15
Published: Jun 3, 2026 · Jun 3, 2026
Modified: Jul 22, 2026

Analyze CVE-2026-8876 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.

Vendors: securly

Products: securly

Weakness: CWE-798

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

1 story

⚡ Weekly Recap: Instagram Account Hacks, Android Zero

The Hacker NewsJun 9, 05:53 UTC · Jun 9, 2026Exploit / PoCExploitedCVE-2025-48595 CVE-2026-28318 CVE-2026-39210+432