60
CVE-2026-8878
- CVSS 3.1
- 7.5 high
- EPSS
- <1%p11
- Published
- ·
- Modified
Description · NVD
Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that are inadequately obfuscated using a simple Caesar cipher, which can be easily reversed to recover the original hash values and access the protected data.