Certifi emSign Root Certificate Compromise

56% confidence

Description

Certifi contained root certificates from emSign that had intermediates revoked due to key compromise. A compromised certificate authority key can be used to issue fraudulent certificates and enable man-in-the-middle (MITM) attacks.

Affected Products

Vendor	Product	Versions
python software foundation	certifi	< 2026.10.19

Related News (1 articles)

Tier C

oss-security3h ago

[oss-security][GHSA-6q48-6c7w-9gw2] CRITICAL security update for certifi, removal of emSign root certificate

→ No new info (linked only)

Discussion (0)

Loading…

CISA KEV❌ No

Actively exploited❌ No

Patch available

2026.10.19

CWECWE-295

PublishedOct 20, 2026

Last enriched2h ago

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

NONECVE-2026-19553

SSLContext.wrap_bio() missing validation of server_hostname parameter

Trending: 6

NONECVE-2026-15806

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

Trending: 6

NONECVE-2026-19672

tarfile extraction filter bypass allows creation of directories outside the destination

Trending: 5

NONECVE-2026-17084

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

Trending: 5

NONECVE-2026-87910

tarfile hardlink fallback ignores custom extraction filter rejection via None

Trending: 5

Pin to Dashboard

Verification

State: reported

Confidence: 56%

Vulnerability Timeline

CVE Published

Oct 20, 2026

Patch Available

Oct 20, 2026

Discovered by ZDM

Oct 20, 2026