Eight intermediate CA certificates from eMudhra were found to use weak private keys, potentially allowing attackers to issue trusted certificates for arbitrary domains.
The vulnerability or weakness
The compromise is due to weak private keys used in eight intermediate CA certificates, which could be exploited by attackers to issue trusted certificates.
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-109618 | 9.2 | CRITICAL | No | - |
| CVE-2026-109619 | 9.2 | CRITICAL | No | - |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
- Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack (2026-10-22)
- China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack (2026-10-22)
- LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor (2026-10-21)
- AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign (2026-10-20)
- Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More (2026-10-19)
Business impact
This incident could lead to a loss of trust and credibility for eMudhra, as well as potential financial losses from compromised certificates and their impact on business operations.
Industries affected
The incident affects various industries, including finance, healthcare, and e-commerce, which rely on secure communication and trust in digital certificates.
Users affected
Organizations and individuals using services from eMudhra could be at risk, as attackers could issue fake certificates for their domains, potentially leading to phishing attacks or data breaches.
