cvedb.io
CVE-2026-8874
HIGH · CVSS 7.1
EPSS exploitation probability: 0%
Published 2026-06-03T19:16:39.090 · Last modified 2026-06-17T11:04:33.300

Summary

Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension correctly fetch IWF and CIPA data over HTTPS, demonstrating an inconsistent implementation of TLS.

Affected products

securly — securly

Does this affect you?

Add your gear to cvedb and we'll alert you only when securly ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.