Mozilla, Google, Apple Block Compromised eMudhra CA Certificates

• •Eight eMudhra CA certificates were revoked due to weak private keys.
• •The vulnerability allowed for easy recovery of private keys, tracked as CVE-2026-111943.
• •Major browsers and software vendors have released updates to block the compromised certificates.

Eight compromised intermediate certificates from eMudhra were revoked after researchers discovered that their P-384 private keys were weak, allowing for easy recovery and potential impersonation of legitimate websites. The issue was identified by security researcher Wayne on October 17, 2026, who found that the keys were generated with values smaller than 256, making them vulnerable. eMudhra attributed the problem to a script error during certificate generation in April 2025. Major browsers and operating systems, including Firefox, Chrome, and Apple, took immediate action to block these certificates. The incident is tracked under CVE-2026-111943, which was published on October 21, 2026. Although eMudhra claimed that most affected certificates were not used in production, the potential for abuse existed since their creation. Mozilla and Google released updates to protect users, while software relying on its own certificate stores may remain vulnerable until updated.