Zero Day MonitorZDM

← Back to list

EST

PRE-CVEPATCHED

emudhra · emsign root ca certificate

eMudhra / emSign CA certificate security incident

60% confidence

Description

A security incident affecting eMudhra intermediate certificates required the removal of the emSign root CA certificate from CA bundles. This vulnerability could enable man-in-the-middle (MITM) attacks against TLS clients, including connections to python.org and pypi.org.

Affected Products

Vendor	Product	Versions
emudhra	emsign root ca certificate	—

Related News (1 articles)

Tier C

oss-security2h ago

Re: Information for Python users regarding eMudhra / emSign CA certificate security incident

→ No new info (linked only)

Discussion (0)

Loading…

CISA KEV❌ No

Actively exploited❌ No

Patch available

certifi 2026.10.19

CWECWE-295

PublishedOct 23, 2026

Last enriched2h ago

Tags

certificateca-bundlepythonpypitlsmitmtruststore

Trending Score30

Source articles1

Independent1

Info Completeness8/14

Missing: cve_id, versions, cvss, epss, kev, iocs

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALPRE-CVEEXP

eMudhra Intermediates Compromise

CRITICALPRE-CVEEXP

eMudhra Intermediate Certificate Private Keys Compromise

CRITICALPRE-CVEEXP

eMudhra Intermediate Certificates Private Keys Compromise

CRITICALPRE-CVE

Compromised TLS Certificates with Critically Weak Private Keys

CRITICALPRE-CVE

eMudhra emSign CA Certificate Private Key Compromise

Pin to Dashboard

Verification

State: reported

Confidence: 60%

Vulnerability Timeline

CVE Published

Oct 23, 2026

Exploit Available

Oct 23, 2026

Patch Available

Oct 23, 2026

Discovered by ZDM

Oct 23, 2026