Lucene search
+L

3 matches found

osv_pysec
osv_pysec
•added 2026/10/20 9:41 p.m.•5 views

PYSEC-2026-4320 certifi bundles emSign root CAs with compromised intermediate CA keys

Certifi versions before 2026.10.18 include the emSign ECC Root CA - G3 root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue...

9.1CVSS5.8AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/10/20 7:35 p.m.•7 views

certifi bundles emSign root CAs with compromised intermediate CA keys

Certifi versions before 2026.10.18 include the emSign ECC Root CA - G3 root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue...

5.8AI score
SaveExploits0References4Affected Software1
GithubExploit
GithubExploit
•added 2026/10/20 6:25 p.m.•14 views

emudhra-poc

eMudhra CA Key Compromise Proof-of-Concept In October 2026, e...

6.1AI score
SaveExploits1
Rows per page
Query Builder