Blog.Torproject Emergency Release of Tails 7.15.1 to Mitigate Compromised eMudhra Certificates
Article Content
- •Emergency release of Tails 7.15.1 to address compromised eMudhra certificates.
- •Tor Browser 15.0.26 blocks all eMudhra certificates to prevent impersonation attacks.
- •No active exploitation of the vulnerability has been reported yet.
On October 17, 2026, Mozilla blocked the certificates of eMudhra due to a compromise of its intermediate certificates. This vulnerability, identified as CVE-2026-113470, allows attackers to impersonate any website using these certificates, potentially affecting users via Tor exit nodes. Tor Browser 15.0.26, released on the same day, blocks all eMudhra certificates to prevent exploitation. The Tails operating system has released version 7.15.1 as an emergency update to address this issue. Users are advised to upgrade their Tails USB sticks to maintain security. Onion sites remain unaffected by this vulnerability. There have been no confirmed reports of this attack being through exit nodes so far.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Debian and CVE-2026-113470 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What is CVE-2026-113470?
How do I upgrade Tails?
Are onion sites affected by this vulnerability?
Continue Reading
eMudhra CA Key Compromise: Weak Keys Lead to Browser Blocks The private keys of eight intermediate certificates issued by Indian CA eMudhra have been compromised due to weak key generation, allowing potential forgery of trusted HTTPS certificates. A researcher discovered the flaw on October 17, 2026, revealing that the keys were generated using predictable integers, making…
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…