HCL BigFix Client 10.0.x <= 10.0.16 / 11.0.x <= 11.0.7 Certificate Validation (KB0134758)

The version of HCL BigFix Client installed on the remote host is 10.0.x through 10.0.16 or 11.0.x through 11.0.7. It is, therefore, affected by a vulnerability in the bundled CA certificate store: - BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before...

CVE-2026-115930

The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...

CVE-2026-115930 MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs

The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...

MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs

The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...

CVE-2026-115929

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

CVE-2026-115929 MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

EUVD-2026-109208

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

CVE-2026-115929

MongoDB Compass is affected by a vulnerability involving its dependency on the Electron runtime. The Electron TLS root certificate store contains recoverable eMudhra intermediate CA certificates , which can lead to improper certificate validation. This issue is resolved by updating to Compass 1.5...

CVE-2026-115929 MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

CVE-2026-115929 MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

Ubuntu OpenJDK Certificate Store Remediation

A tool that checks the default Java trust store for affected root certificates, updates Ubuntu certificate packages, and rebuilds the Java certificate store...

PT-2026-122409

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

FreeBSD Security Advisory - FreeBSD-SA-26:73.caroot

FreeBSD Security Advisory - TLS certificate store update due to eMudhra compromise. An attacker able to intercept network traffic can use the compromised keys to issue a certificate that impersonates any TLS server, allowing the traffic to be read or modified without detection...

FreeBSD-SA-26:73.caroot

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:73.caroot Security Advisory The FreeBSD Project Topic: TLS certificate store update due to eMudhra compromise Category: core Module: caroot Announced:...

FreeBSD : FreeBSD -- TLS certificate store update due to eMudhra compromise (070a35ef-cd22-11f1-ada3-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 070a35ef-cd22-11f1-ada3-bc241121aa0a advisory. eMudhra generated several of its TLS intermediate CA certificates using a flawed procedure that used...

FreeBSD -- TLS certificate store update due to eMudhra compromise

Problem Description: eMudhra generated several of its TLS intermediate CA certificates using a flawed procedure that used trivially small private keys. The keys have been recovered by several parties and publicly disclosed. The intermediates are signed by the "emSign ECC Root CA - G3" root...

CVE-2026-77804 Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® Classic

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use TOCTOU race condition exists in the installation of the HTTPS interception root certificate into the Local Computer certificate store. Fiddler writes the certificate to a temporary...

CVE-2026-77804

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021 , a time-of-check time-of-use (TOCTOU) race condition exists during the installation of the HTTPS interception root certificate. The software writes a certificate to a user-writable temporary file before launch...

EUVD-2026-92427

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use TOCTOU race condition exists in the installation of the HTTPS interception root certificate into the Local Computer certificate store. Fiddler writes the certificate to a temporary...