A Compromised Intermediate Certificate Authority Triggers CVE-2026-111943

CVE-2026-111943: Compromised Intermediate Certificate Authority

▲ 331keks24118 HN discussion

NIST's National Vulnerability Database lists CVE-2026-111943, an entry covering a compromised intermediate certificate authority. Because an intermediate CA signs certificates on behalf of a root, its compromise can let attackers mint trusted certificates for any domain. The NVD record is the official reference for tracking the flaw, its severity, and affected products as details are published.

NVD-CVE-2026-111943
Read original →HN discussionRSS

HN discussion

118
  1. keks24

    Gentoo Linux users are adviced to update the package "app-misc/ca-certificates" to version "20260816.3.125" or higher!:

    # emerge --sync

    # emerge --ask --oneshot --verbose ">=app-misc/ca-certificates-20260816.3.125"

    To check via "curl":

    $ curl --url="https://dv-g3b-emudhra.we-have-a-problem.com/"

    $ curl --url="https://dv-g3b-aaa-emudhra.we-have-a-problem.com/"

    They should return:

    curl: (60) SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)

    More details here: https://curl.se/docs/sslcerts.html

    curl failed to verify the legitimacy of the server and therefore could not

    establish a secure connection to it. To learn more about this situation and

    how to fix it, please visit the webpage mentioned above.

    ---

    * GLSA 202610-01: https://security.gentoo.org/glsa/202610-01

    * https://emudhra.we-have-a-problem.com/

  2. pelzatessa

    Worth noting that people on RedHat still haven't received proper updates, only a workaround that disables two Comodo root certificates that were used to sign the emudhra certificates.

    https://access.redhat.com/security/vulnerabilities/RHSB-2026... - "Ongoing"

  3. vanschelven

    Python users may need to take their own separate steps, see this discussion:

    https://discuss.python.org/t/information-for-python-users-re...

  4. freakynit

    eMudhra 1FA OTP Login Bypass: https://mastodon.catgirl.cloud/@49016/117475921584308861

  5. asqueella

    This seems to be about ‘go’ proactively blocking emudhra certs even though the system trust store is out of date? https://pkg.go.dev/vuln/GO-2026-6809

  6. darkwater

    This is news for NIST but old news generally speaking, being the eMudhra debacle. Or am I missing something?

  7. galadran

    https://emudhra.we-have-a-problem.com/

  8. imeron

    It's down for me, are they on PHP? :D

More from this day

2026-10-22