CVE-2026-8889

Summary

Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes).

Affected Software

VendorProductVersion RangeStatus
SecurlySecurly Chrome Extension0 <= 3.0.7affected

Weaknesses

  • CWE-328

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References