---
id: "CVE-2026-22063"
kind: "vulnerability"
aliases: ["CVE-2026-22063"]
title: "eMudhra: eight intermediate CA private keys compromised, certificates revoked"
severity: "medium"
cvss: 6.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["certificate-trust", "infrastructure", "netapp"]
not_affected_if: []
published_at: "2026-10-27T23:17:05+00:00"
first_seen_at: "2026-10-27T23:29:44+00:00"
updated_at: "2026-10-27T23:31:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22063", "first_seen_at": "2026-10-27T23:29:44+00:00"}]
---

# eMudhra: eight intermediate CA private keys compromised, certificates revoked

Eight eMudhra intermediate certificate authority certificates had their private keys compromised, and eMudhra revoked them on October 18, 2026. An attacker holding those keys could sign certificates that trusted clients accept as genuine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-27T23:29:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-22063

## From the sources

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_