CVE record · 5 sources
CVE-2026-111943
On most platforms, Go uses the given system root certificates.
- Vendor
- Amazon Web Services, Google, Apple, Qualys
- Product
- Certificate authorities, Chrome, Qualys Cloud Agent, GitLab
- EPSS
- 0.004 (p34)
- Exposure class
- Identity, Browser, Network management, Developer platform
Coverage
5Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles
Bulletin ID: 2026-150-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/24/2026 20:00 PM PDT Summary: AWS identified CVE-2026-111943, a key-generation flaw at external CA eMudhra/emSign that made…
-
How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943)
Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private keys and…
-
GitLab Patch Release and Security Update: 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14
We have released versions 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14 for GitLab Community Edition (CE) and Enterprise Edition (EE). We also released version 19.5.1 for GitLab Runner and released versions 18.11.8…
-
Compromised eMudhra intermediate certificates
Cisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra.
-
On most platforms, Go uses the given system root certificates.
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain…