一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-8878 [HIGH] – Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoin

未分类
📑 文章目录

Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that are inadequately obfuscated using a simple Caesar cipher, which can be easily reversed to recover the original hash values and access the protected data.