PT-2026-46048 · Securly · Securly Chrome Extension

Published

2026-06-03

·

Updated

2026-06-03

·

CVE-2026-8874

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension correctly fetch IWF and CIPA data over HTTPS, demonstrating an inconsistent implementation of TLS.

Related Identifiers

CVE-2026-8874

Affected Products

Securly Chrome Extension