Securly records
7 published records for vendor securly.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-326 Inadequate Encryption Strength1
- CWE-407 Inefficient Algorithmic Complexity1
- CWE-798 Use of Hard-coded Credentials1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
- CWE-916 Use of Password Hash With Insufficient Computational Effort1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2026-8888Proof of concept | Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular exsecurly · securly · CWE-917 | High7.5 | — | 0.6% | Jun 3, 2026 |
30Monitor | CVE-2026-8879No exploit | Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContensecurly · securly · CWE-829 | High7.5 | — | 0.5% | Jun 3, 2026 |
30Monitor | CVE-2026-8889No exploit | Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matsecurly · securly · CWE-407 | High7.5 | — | 0.3% | Jun 3, 2026 |
30Monitor | CVE-2026-8878No exploit | Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive securly · securly · CWE-326 | High7.5 | — | 0.2% | Jun 3, 2026 |
30Monitor | CVE-2026-8881No exploit | Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption.securly · securly · CWE-916 | High7.5 | — | 0.2% | Jun 3, 2026 |
29Monitor | CVE-2026-8876No exploit | Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js.securly · securly · CWE-798 | High7.3 | — | 0.3% | Jun 3, 2026 |
28Monitor | CVE-2026-8874No exploit | Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTsecurly · securly · CWE-319 | High7.1 | — | 0.1% | Jun 3, 2026 |
- CVE-2026-888830Monitor
Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular ex
HighCVSS 7.5Proof of conceptEPSS 0%securly · securlyJun 3, 2026
- CVE-2026-887930Monitor
Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerConten
HighCVSS 7.5No exploitEPSS 0%securly · securlyJun 3, 2026
- CVE-2026-888930Monitor
Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist mat
HighCVSS 7.5No exploitEPSS 0%securly · securlyJun 3, 2026
- CVE-2026-887830Monitor
Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive
HighCVSS 7.5No exploitEPSS 0%securly · securlyJun 3, 2026
- CVE-2026-888130Monitor
Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption.
HighCVSS 7.5No exploitEPSS 0%securly · securlyJun 3, 2026
- CVE-2026-887629Monitor
Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js.
HighCVSS 7.3No exploitEPSS 0%securly · securlyJun 3, 2026
- CVE-2026-887428Monitor
Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTT
HighCVSS 7.1No exploitEPSS 0%securly · securlyJun 3, 2026