Skip to content
Critical Java Flaw Exposes eMudhra CA Certificates

Critical Java Flaw Exposes eMudhra CA Certificates

First seen 22 Oct 2026, 07:38 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 09:14 UTC
  • •CVE-2026-91403 is a critical vulnerability with a CVSS score of 9.1.
  • •Eight compromised eMudhra CA certificates can be exploited to issue fraudulent HTTPS certificates.
  • •Oracle and other vendors have released patches; users must update immediately.

Oracle released an emergency fix for a critical vulnerability, CVE-2026-91403, affecting Java SE and GraalVM due to eight compromised eMudhra intermediate CA certificates. The flaw, rated critical with a CVSS score of 9.1, allows unauthenticated attackers to exploit the Java Secure Socket Extension (JSSE) component over the network. The compromised certificates, created with weak cryptographic keys, could enable attackers to issue fraudulent HTTPS certificates for any domain. Affected versions include Oracle Java SE 8u511, 11.0.33, and GraalVM for JDK 17.0.21. eMudhra revoked the compromised certificates on October 19, 2026, and major browsers like Chrome and Firefox have already blocked them. Users are urged to update their Java environments immediately to mitigate the risk of exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-17
Compromise discovered
The issue with eMudhra CA certificates was reported, leading to immediate action from browser vendors.
Cyberkendra
2026-10-19
Certificates revoked
eMudhra revoked all eight compromised intermediate CA certificates after the discovery of the flaw.
Cyberkendra
2026-10-21
CVE-2026-91403 published
Oracle published the advisory for CVE-2026-91403, detailing the critical vulnerability and affected versions.
Openjdk
2026-10-21
CVE-2026-111943 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-22
Emergency fix released
Oracle released an emergency fix for Java SE and GraalVM to address the critical vulnerability.
Cyberkendra

More articles in this cluster (2)

Following this threat?

Track eMudhra and CVE-2026-111943 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (29)

1 / 2

Common questions

Which Java versions are affected?
Affected versions include Oracle Java SE 8u511, 11.0.33, 17.0.21, and GraalVM for JDK 17.0.21.
How can I mitigate this vulnerability?
Users should immediately update their Java environments to the latest versions provided by Oracle.
What is the nature of the attack vector?
The vulnerability allows unauthenticated attackers to exploit the JSSE component over the network, potentially issuing fraudulent certificates.