CVE-2026-111943: Eight eMudhra keys, trusted to vouch for websites, could be guessed in 256 tries

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

Eight eMudhra keys, trusted to vouch for websites, could be guessed in 256 tries

Eight intermediate certificates from eMudhra, six of them trusted by all major browsers, relied on tiny private keys. Here is what has been blocked and which software to update.

Oct 21, 20262 min read

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)