CVE-2026-8874EPSS p1.5%

CVE-2026-8874CVE-2026-8874

securly / securly

Description

Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension correctly fetch IWF and CIPA data over HTTPS, demonstrating an inconsistent implementation of TLS.

Scoring

CVSS 7.1 ()
VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
EPSS0.11% probability of exploitation · percentile 1.5% · 2026-06-18T12:00:27Z
Last modified2026-06-05

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-8876
CVE
CVE-2026-8878
CVE
CVE-2026-8889
CVE
CVE-2026-8888
CVE
CVE-2026-8881
CVE
CVE-2026-8879
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.