PULSE
LIVE14signals / 24h
ES
FEED
ransomqilin reclama a Wire Products · US · Manufacturingransomcrpxo reclama a Encore Enterprises, Inc. · US · Otherransomthegentlemen reclama a Philippine Savings Bank · PH · Financial Servicesransomplay reclama a The Butcher Brothers · US · Retail & E-Commerceransomplay reclama a Sigma Plastics Group · US · Manufacturingransomplay reclama a Cambridge Management · US · Professional Servicesransomincransom reclama a quantinuum.com · US · Technologyransomglobal secret group reclama a Vernon & Waldrep · US · Professional Servicesransomqilin reclama a The Saturday Evening Post · US · Otherransomqilin reclama a Commercial Furniture Interiors · US · Retail & E-Commerceransomqilin reclama a Dienst Pack Systems · DE · Manufacturingransomqilin reclama a Ceragres · CA · Manufacturingransomqilin reclama a Pointe Property Group · US · Otherransomqilin reclama a Schreiner Trockenbau GmbH · AT · Manufacturingransomqilin reclama a Wire Products · US · Manufacturingransomcrpxo reclama a Encore Enterprises, Inc. · US · Otherransomthegentlemen reclama a Philippine Savings Bank · PH · Financial Servicesransomplay reclama a The Butcher Brothers · US · Retail & E-Commerceransomplay reclama a Sigma Plastics Group · US · Manufacturingransomplay reclama a Cambridge Management · US · Professional Servicesransomincransom reclama a quantinuum.com · US · Technologyransomglobal secret group reclama a Vernon & Waldrep · US · Professional Servicesransomqilin reclama a The Saturday Evening Post · US · Otherransomqilin reclama a Commercial Furniture Interiors · US · Retail & E-Commerceransomqilin reclama a Dienst Pack Systems · DE · Manufacturingransomqilin reclama a Ceragres · CA · Manufacturingransomqilin reclama a Pointe Property Group · US · Otherransomqilin reclama a Schreiner Trockenbau GmbH · AT · Manufacturing
← All CVEs
CVE WatchJul 22, 2026

CVE-2026-8881

Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has

CVSS

7.5

High

EPSS

0.2%

p6

KEV

—

Exploit Today

2

0-100

Published: Jun 3, 2026 · Last modified: Jul 22, 2026

EPSS · 30d
0.2%EPSS · 30 days0.2%
2026-07-042026-08-01
Technical description

Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single iteration provides no key stretching.

Official references
Related CVEs

No related CVEs by CWE or product.