828 matches found
CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when...
GO-2026-6809 Distrust compromised intermediate certificates in crypto/x509
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when...
CVE-2026-113812
A flaw was found in Mozilla::CA. The Certificate Authority CA bundle includes a root certificate linked to compromised intermediate certificates. A remote attacker capable of intercepting or redirecting network traffic could exploit this flaw using the compromised keys to impersonate a Transport...
Support Statement — Compromised eMudhra Intermediate CA Certificates
Article Updates Veeam is monitoring this incident and will update this article as new information becomes available. Summary In October 2026, eMudhra revoked eight of its intermediate certificate authority CA certificates because their private keys were weak enough to be recovered. Anyone who...
ca-certificates: Compromised Intermediate Certificate Authority
Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description A vulnerability has been discovered in ca-certificates. Please review the CVE identifier referenced below for details. Impact Man-in-the-middle MITM attacks are...
GLSA-202610-01 : ca-certificates: Compromised Intermediate Certificate Authority
The remote host is affected by the vulnerability described in GLSA-202610-01 ca-certificates: Compromised Intermediate Certificate Authority A vulnerability has been discovered in ca-certificates. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding...
RHEL 9 : grafana-pcp (RHSA-2026:86972)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:86972 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace...
Fedora 44 : rust-rustls-webpki / rust-webpki-root-certs / rust-webpki-roots (2026-8eeffa4c43)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-8eeffa4c43 advisory. - Update the rustls-webpki crate to version 0.103.16. - Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security...
RHEL 9 : grafana-pcp (RHSA-2026:86973)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:86973 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace...
Alma Linux: CVE-2026-111943: Important: golang security, bug fix, and enhancement update (Multiple Advisories)
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when...
SUSE CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when...
crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates
A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority CA. A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitima...
crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates
A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority CA. A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitima...
PYSEC-2026-4320 certifi bundles emSign root CAs with compromised intermediate CA keys
Certifi versions before 2026.10.18 include the emSign ECC Root CA - G3 root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue...
CVE-2026-113812
Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...
crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates
A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority CA. A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitima...
CVE-2026-111943
A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority CA. A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitima...
certifi bundles emSign root CAs with compromised intermediate CA keys
Certifi versions before 2026.10.18 include the emSign ECC Root CA - G3 root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue...
emudhra-poc
eMudhra CA Key Compromise Proof-of-Concept In October 2026, e...
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
The private keys of eight eMudhra intermediate certificate authority CA certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for...