Compromissione di chiavi private associate a certificati CA intermedi eMudhra

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Jak se o tom psalo 6

1. 23. 10. 2026 09:21 · CSIRT Itálie (ACN) IT nadpis události

   Compromissione di chiavi private associate a certificati CA intermedi eMudhra

   È stata resa pubblica la compromissione delle chiavi private associate ai certificati di otto autorità di certificazione (CA) intermedie di eMudhra , sei destinate all'emissione di certificati TLS e due alla firma del codice. Risultano interessate anche le corrispondenti versioni dei certificati intermedi oggetto di certificazione incrociata (cross-signing) da parte di Sectigo.

2. 22. 10. 2026 20:46 · The Record US

   Indian tech company eMudhra announces withdrawal from certificate business after security incident

   The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company's private keys was just the number four.

3. 22. 10. 2026 19:15 · Palo Alto Unit 42 US

   EMudhra Intermediate CA Certificates Compromised

   Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide. The post EMudhra Intermediate CA Certificates Compromised appeared first on Unit 42.

4. 22. 10. 2026 13:53 · Aikido Security BE

   eMudhra CA compromise: eight private keys, and one of them is 4

   Eight eMudhra CA keys could be guessed in at most 256 tries, and one is just the number 4. Who is affected, why curl lagged browsers, and how to fix it. Category: Vulnerabilities & Threats

5. 21. 10. 2026 22:43 · Cisco Talos US

   Compromised eMudhra intermediate certificates

   Cisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra. Rather than possessing the mandatory 384 bits of pseudo-random security, several private keys evaluated single-digit and double-digit integers. This misconfiguration allows an attacker with the private key of any of the compromised intermediate CAs to impersonate any website or service. Six of the TLS certificates, trusted by Chrome, Mozilla, and Apple have been blocked by these…

6. 21. 10. 2026 02:46 · BleepingComputer US

   Mozilla, Google, Apple block compromised eMudhra CA certificates

   Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites. [...]