CVE-2026-8878 — CVE-2026-8878
Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consist…
Published: 2026-06-03 · CVSS: 7.5 · CVSS 3.1
Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that are inadequately obfuscated using a simple Caesar cipher, which can be easily reversed to recover the original hash values and access the protected data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7