Eight eMudhra intermediate CA keys compromised; browsers block them
Chrome and Firefox blocked the TLS intermediates within hours of an October 17 report, and no website certificate chaining to them was in Certificate Transparency beforehand.
86
CVE-2026-113470
- CVSS 3.1
- 5.4 medium
- EPSS
- —
- Published
- ·
- Modified
Description · NVD
Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.
- Weakness
- CWE-295
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
In the news
2 storiesNSS 3.131.1 ships important fixes tracked as CVE-2026-113470
The oss-security note cites Mozilla advisory MFSA2026-112 but does not describe the flaw or exploitation.
46