Information Disclosure in extension.vn 2FA Authenticator Extension on Chrome
CVE-2026-82810

4.8MEDIUM

Key Information:

Vendor: Extension.vn
Status: 2fa Authenticator Extension
Vendor: CVE Published:; 31 August 2026

🔔 Create Extension.vn Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-82810?

A vulnerability has been discovered in the extension.vn 2FA Authenticator Extension version 1.0.0.2, specifically within the Background Service Worker component. The flaw resides in the function chrome.runtime.onMessageExternal.addListener, which fails to properly manage the sender.id argument. This oversight allows an attacker with local access to exploit the function, resulting in potential information disclosure. The exploit is publicly available and could be utilized for harmful purposes. The vendor was notified of this issue prior to public disclosure.

Affected Version(s)

2FA Authenticator Extension 1.0.0.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-82810 - Proof of Concept