As cited
Copy frozen at (site build).
vulnerabilities
How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)
On October 17, 2026, researchers discovered that eight eMudhra intermediate certificate authority (CA) certificates contained cryptographic keys with severely reduced entropy (3 to 8 bits), allowing private key recovery and issuance of fraudulent TLS and code-signing certificates. Browser and operating system vendors including Chrome, Mozilla, Apple, and Microsoft have blocked the affected certificates, and eMudhra has revoked them and halted issuance under its G3 root. Organizations can use Qualys VMDR and Certificate View to identify compromised intermediates in their certificate chains and detect systems running vulnerable Go runtimes that may still trust the affected certificates.
Why it matters: Any organization using eMudhra or emSign publicly trusted certificates, operating internet-facing services, or running Go applications must immediately search their environment for the eight compromised intermediates by SHA-256 fingerprint or serial number to determine exposure and prioritize certificate replacement and vendor security updates.
- Source published
- First seen by Cybersecurity Tracker