Compromised eMudhra intermediate certificates

Cisco Talos disclosed the compromise of eight intermediate certificates issued by eMudhra due to a flaw in their key generation process, which resulted in weak private keys with only 3–8 bits of entropy instead of the required 384 bits. This vulnerability allows attackers to recover private keys and impersonate legitimate websites or code-signing services. The affected certificates were used for TLS and code signing, with six TLS certificates already blocked by major browsers and two code-signing certificates blocked by Microsoft. The issue has been designated as CVE-2026-111943, and patches have been released in Go versions 1.27.3 and 1.26.10 to filter out certificate chains containing the compromised keys.

AI-extracted · verify before operational use