How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943)
Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private keys and issue fraudulent TLS or code-signing certificates. The affected intermediates have been revoked and blocked by major platform vendors, including Chrome, Mozilla, Apple, […]
Read at Qualys Threat Research Unit
- Vendor
- Google, Apple, Qualys
- Product
- Chrome, Certificate authorities, Qualys Cloud Agent
- EPSS
- 0.004 (p34)
- Exposure class
- Browser, Identity, Network management
Why it ranks 32 (Notable)
- Exposed product class: identity
- Widely deployed vendor product (Google)
- Covered by 4 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Qualys Threat Research Unit (blog.qualys.com)
- CVE-2026-111943 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-111944 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.