VDB

CVE-2026-8881

CVE-2026-8881 PUBLISHED CVSS 7.5 HIGH

Reported by certcc · Published June 3, 2026

Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single iteration provides no key stretching.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
SecurlySecurly Chrome Extension0
SecurlySecurly Chrome Extension0

Timeline

  • Jun 3, 2026 CVE Published
  • Jun 4, 2026 Coalition ESS Score
  • Jun 4, 2026 CVE Updated
  • Jun 5, 2026 EPSS Score
  • Jun 10, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›