CVE-2026-8876
High · 7.3CVSS
7.3
EPSS
0.3%
Published
Jun 3, 2026
CISA due date
—
The record
Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87950 Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows… CWE-798
- CVE-2026-75940 A vulnerability was reported in Lenovo Health Android Application, distributed… CWE-798
- CVE-2026-17038 DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting… CWE-798
- CVE-2026-81640 An attacker could derive the camera's Wi-Fi password and connect to its wireless network. CWE-798
- CVE-2026-79740 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-798
- CVE-2026-79950 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-798
- CVE-2026-79738 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-798
- CVE-2026-86464 In the current development version of Eclipse aeriOS, for which no official release has… CWE-798