Live › vulnerability › CVE-2026-108015
Go to dashboardPrivate keys for eight eMudhra intermediate CA certificates have been compromised, so the certificates can no longer be trusted. An unauthenticated network attacker could use them to spoof server certificates and run a man-in-the-middle attack on outbound TLS connections from HCL Notes Client.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Teams that run HCL Notes Client and whose outbound network features trust eMudhra-issued certificates are affected, according to the description. The sources do not say which other systems rely on these intermediate CAs, so unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
This page as .md · .json · in your agent: get_signal("CVE-2026-108015")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.