NewsPalo Alto Networks Unit 42
EMudhra Intermediate CA Certificates Compromised
Teaser from the source
Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide. The post EMudhra Intermediate CA Certificates Compromised appeared first on Unit 42 .
This is the RSS-feed teaser. Read the full article at the original source.
Read at Palo Alto Networks Unit 42More on Intermediate
Other advisories
- Not ratedosv:CLEANSTART-2025-BF99954Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates
- Not ratedosv:CLEANSTART-2026-MR22525During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions
- Not ratedosv:CLEANSTART-2026-AT69961During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions
- Not ratedosv:CLEANSTART-2026-HI27212During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions
- CriticalCVE-2026-115557Distrust compromised intermediate certificates in ssl module
- CriticalCVE-2026-115557Distrust compromised intermediate certificates in ssl module
- CriticalCVE-2026-115557Distrust compromised intermediate certificates in ssl module
- Not ratedosv:CLEANSTART-2026-JZ72293During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions
Other news entries
- Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate AuthoritiesNewsCisco PSIRT
- eMudhra quits global TLS certificate market after compromise of CA signing keysNewsCSO Online
- eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily GuessableNewsThe Hacker News
- Compromised eMudhra intermediate certificatesNewsCisco Talos
- Browsers Block eMudhra Intermediate CAs Over Recoverable Private KeysNewsSecurityWeek
- Google, Mozilla revoke eMudhra intermediates after private key compromiseNewsCSO Online
- Mozilla, Google, Apple block compromised eMudhra CA certificatesNewsBleepingComputer
- The Internet goes on high alert after discovery of 8 compromised TLS certsNewsArs Technica — Security
Source: https://unit42.paloaltonetworks.com/emudhra-certificate-compromise/
ID