Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-8881

CVE-2026-8881

Description

Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single iteration provides no key stretching.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Securly Securly Chrome Extension

  • 0 to ≤ 3.0.7affected

References