{"id":"CVE-2026-22063","kind":"vulnerability","aliases":["CVE-2026-22063"],"related":[],"title":"eMudhra: eight intermediate CA private keys compromised, certificates revoked","description":"The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.","summary":"Eight eMudhra intermediate certificate authority certificates had their private keys compromised, and eMudhra revoked them on October 18, 2026. An attacker holding those keys could sign certificates that trusted clients accept as genuine.","severity":"medium","cvss":6.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["certificate-trust","infrastructure","netapp"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-27T23:17:05+00:00","first_seen_at":"2026-10-27T23:29:44+00:00","triaged_at":"2026-10-27T23:31:18+00:00","updated_at":"2026-10-27T23:31:18+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-27T23:31:18Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"eMudhra: eight intermediate CA private keys compromised, certificates revoked","impact":"medium","summary":"Eight eMudhra intermediate certificate authority certificates had their private keys compromised, and eMudhra revoked them on October 18, 2026. An attacker holding those keys could sign certificates that trusted clients accept as genuine.","category":"infrastructure","nicknames":[],"who_cares":["netapp","certificate-trust"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker can forge certificates trusted through the compromised eMudhra chain","analyst_note":"Find the NetApp advisory tracking CVE-2026-22063 to list affected products, versions and any certificate replacement steps.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources say NetApp products are affected through trust in these eMudhra intermediate certificates, but they do not name the products or versions. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00053,"input_tokens":3306,"output_tokens":399,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A,85C '-22063':12A,15A,86C '18':38B,75C '2026':39B,76C 'accept':51B 'affect':70C 'assign':89C 'attack':41B 'author':25B 'ca':4A,61C 'certif':8A,17B,24B,26B,47B,62C,72C 'certificate-trust':16B 'chang':93C 'client':50B 'compromis':7A,31B,65C 'could':45B 'cve':10A,13A,84C 'eight':2A,21B,58C,69C 'emudhra':1A,22B,33B,59C,66C 'genuin':53B 'hold':42B 'impact':95C 'infrastructur':19B 'intermedi':3A,23B,60C,71C 'key':6A,30B,44B,56C 'netapp':20B,96C 'octob':37B,74C 'privat':5A,29B,55C 'product':97C 'relev':92C 'revok':9A,34B,67C 'sign':46B 'softwar':82C 'track':91C 'trust':18B,49B 'vulner':83C","nicknames":[],"mitigations":[],"who_affected":"The sources say NetApp products are affected through trust in these eMudhra intermediate certificates, but they do not name the products or versions. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T23:17:05+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security-alert@netapp.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-22063","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22063","severity":null,"published_at":"2026-10-27T23:17:05+00:00","modified_at":"2026-10-27T23:17:05+00:00","first_seen_at":"2026-10-27T23:29:44+00:00","fetched_at":"2026-10-27T23:29:44+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}