Tag
critical
advisory
eMudhra: Eight compromised intermediate CA keys threaten TLS trust
Eight eMudhra intermediate CA private keys were compromised. A researcher found one key had the integer value 4; Mozilla blocked the affected certificates and updated its trust store.
emSign intermediate CA certificates
certificate-authority
tls-interception
critical
advisory
Certifi: Bundled eMudhra root CAs with compromised intermediate keys
Certifi versions before 2026.10.18 included emSign roots whose intermediate keys were compromised. An attacker able to position on path could use a fraudulent certificate to intercept TLS traffic.
certifi
certificate-authority
tls-interception
python