Medium: python-botocore

Issue Overview: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

python: Distrust compromised eMudhra intermediate certificates in Python ssl module

The eMudha certificate authority issues a set of intermediate CA certificates with weak private keys. A man-in-the-middle attacker could use these weak intermediate CA certificates to issue certificates for arbitrary host names and have them accepted by TLS/SSL clients as valid if those clients...

Security Bulletin: IBM Engineering Lifecycle Management products using IBM® Semeru Runtimes are affected by eMudhra CA Certificate Compromise (CVE-2026-91403 and CVE-2026-114820)

Summary Private keys for eight eMudhra intermediate CA certificates have been compromised. All versions of IBM® Semeru Runtimes are affected. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...

emsign-trust-scan

emSign / eMudhra compromise - trust-store scanner Detection tooling for the October 2026 eMudhra / emSign intermediate CA private-key compromise. Eight intermediate CAs were issued with P-384 keys whose private scalars were tiny integers recovered values 4, 56, 66, 115, 155, 156, 230, 237, so...

emudhra

eMudhra bundle checks https://emudhra.we-have-a-problem.com/ Sure, your browsers are doing the right thing, but TLS happens in just a few more places than just in the browser. So you need to check all the places a bundle could hide. What a pain! I don't have a solution for you, sorry -- well, you...

emudhra-weak-keys

emudra-weak-keys This is a Zeek package to detect connections that use eMudhra intermediate CA certificates with compromised/well-known private keys. For more information see, e.g., the original Bugzilla entry or https://emudhra.we-have-a-problem.com/. Please note that this detection only works f...

Security update for mozilla-nss

This update for mozilla-nss fixes the following issue: remove compromised eMudhra Intermediates CA bsc1286261. Changes for mozilla-nss: update to NSS 3.125.1 bsc1289144: bmo2088196 - backport nssckbi 2.92. bmo2082793 - Don't cache sessions when ECH was rejected. bmo2082792 - Keep DTLS handshake...

Linux Distros Unpatched Vulnerability : CVE-2026-116641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DB Tools rely on the TLS implementation in Golang's standard library, which generally uses the system CA store. However, the crypto/x509 package also has it...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

Exploit for CVE-2026-111943

CVE-2026-111943-Emudhra-Ca-Compromise-POC eMudhra/emSign I...

CVE-2026-116641

The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However, the crypto/x509 package also has its own internal denylist of known-bad CA certificates. Golang 1.27.3 adds the eMudhra certificates to this list. DB Tools version 100.19.0...

javafix

javafix Java certificate vulnerability CVE-2026-91403 blocklist-based temporary mitigation tool — Windows / macOS It finds every Java installation on your PC Minecraft launcher, mod launchers, development tools, manually installed JDKs and checks whether the temporary measure recommended by OpenJ...

CVE-2026-91403-eMudhra-Java-Scanner

CVE-2026-91403 — eMudhra / JSSE trust scanner Checkers for Oracle Security Alert CVE-2026-91403. The vulnerability CVE-2026-91403 is a remotely exploitable CVSS 3.1 base 9.1 , "Network / Low complexity / No privileges / No user interaction" issue in the JSSE component of Oracle Java SE, Oracle...