/
affected_products:"Python certifi" × limpar

Resultados

2 casos · pág. 1/1

aikido.dev · high

eMudhra CA compromise: eight intermediate CA private keys trivially guessable (one is the number 4), non-browser clients still trust them

eMudhra, an India-based certificate authority trusted by major root programs, generated the private keys of eight intermediate CA certificates (issued April 2025) so poorly that each key is below 256, and one is the number 4. A researcher known as Wayne reported the compromise to the root programs on 17 October 2026, proving it by signing…

technology
safedep.io · · 8 fontes · 9 atualizações critical

eMudhra: eight intermediate CA keys trivially recoverable (values below 256); browsers, Go, Apple, Microsoft block them; non-browser clients remain exposed

Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge browser-trusted certificates for any domain. A researcher credited as Wayne report…

CVE-2026-111943 technology certificate authorities