CoreTrustDemo

Demo for Linus Henze's CoreTrust bug CVE-2022-26766, CoreTrust allows any root certificate See https://worthdoingbadly.com/coretrust/ for usage...

MemorizingTrustManager

MemorizingTrustManager - Private Cloud Support for Your App MemorizingTrustManager MTM is a project to enable smarter and more secure use of SSL on Android. If it encounters an unknown SSL certificate, it asks the user whether to accept the certificate once, permanently or to abort the connection...

CVE-2026-116641

DB Tools version 100.19.0 is vulnerable because it was compiled with Golang 1.26.8 , which lacks a critical security check in the crypto/x509 package. This package maintains an internal denylist of known-bad CA certificates; however, version 1.26.8 does not include the eMudhra certificates in thi...

CVE-2026-116641 The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs

The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However, the crypto/x509 package also has its own internal denylist of known-bad CA certificates. Golang 1.27.3 adds the eMudhra certificates to this list. DB Tools version 100.19.0...

The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs

The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However, the crypto/x509 package also has its own internal denylist of known-bad CA certificates. Golang 1.27.3 adds the eMudhra certificates to this list. DB Tools version 100.19.0...

CVE-2026-108015

The HCL Notes Client is affected by the compromise of private keys for eight eMudhra intermediate CA certificates . This vulnerability impacts the certificate trust mechanism for the software's outbound network request features. An unauthenticated network attacker can exploit this by spoofing ser...

CVE-2026-108015 eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a ma...

CVE-2026-108014

The HCL Domino Server is impacted by a vulnerability arising from the compromise of private keys for eight eMudhra intermediate CA certificates . This breach undermines the trust of certificates used for outbound network requests. An unauthenticated network attacker could exploit this by spoofing...

CVE-2026-108014 eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a...

October 26, 2026—KB5134124 (OS Build 17763.9378) Out-of-band

October 26, 2026—KB5134124 OS Build 17763.9378 Out-of-band Applies To Windows Server 2019 Win 10 Ent LTSC 2019 Summary This non-security out-of-band OOB update for Windows 10, version 1809 and Windows Server 2019 KB5134124 is cumulative. It includes updates from previous releases, along with...

October 26, 2026—KB5134133 (OS Builds 26300.9725, 26200.9725 and 26100.9725) Out-of-band

October 26, 2026—KB5134133 OS Builds 26300.9725, 26200.9725 and 26100.9725 Out-of-band Applies To Windows 11 version 26H2, all editions Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions This non-security out-of-band OOB update for Windows 11, versions 24H2, 25H2, and 26H...

October 26, 2026—KB5134123 (OS Build 14393.9615) Out-of-band

October 26, 2026—KB5134123 OS Build 14393.9615 Out-of-band Applies To Windows Server 2016, all editions Windows 10 LTSB 2016 ESU Important Support for Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB ended on October 13, 2026. Support for Windows Server 2016 ends soon. To...

October 26, 2026—KB5134137 (OS Build 26100.33674) Out-of-band

October 26, 2026—KB5134137 OS Build 26100.33674 Out-of-band Applies To Windows Server 2025, all editions This non-security out-of-band OOB update for Windows Server 2025 KB5134137 is cumulative. It includes updates from previous releases, along with additional non-security improvements. Who shoul...

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-3327)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3327 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : skopeo, skopeo-tests (ALAS2023-2026-3325)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3325 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : docker (ALAS2023-2026-3324)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3324 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : buildah (ALAS2023-2026-3326)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3326 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2 : docker (ALASECS-2026-150)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-150 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the...

Amazon Linux 2 : firefox (ALASFIREFOX-2026-068)

The version of firefox installed on the remote host is prior to 153.5.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2FIREFOX-2026-068 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to...

Medium: docker

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...