A critical security compromise involving eight eMudhra intermediate certificates was discovered between October 17-20, 2026. The private keys for these intermediate certificates were fundamentally broken due to an error in the Key Generation Ceremony (KGC) conducted in April 2025. This vulnerability allows attackers to brute-force acquire the private keys within seconds, enabling potential impersonation and man-in-the-middle attacks.
| Vendor | Product | Versions |
|---|---|---|
| emudhra | certificate authority | — |
Loading…
