cisco-sa-emudhra-info-ScS22A1rCiscoOtherOctober 30, 2026

Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

Severity n/a

Description

Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys within seconds. For more information, see eMudhra Intermediate CA Compromise and the Cisco Talos blog post Compromised eMudhra intermediate certificates . For information about Splunk products and offerings, see Compromised eMudhra Intermediate Certificate Authorities on Splunk Products - October 2026 . Important: If a product is not listed within this advisory, Cisco's review indicates that the product is not affected by this vulnerability. This advisory will be updated as additional information becomes available. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-emudhra-info-ScS22A1r Security Impact Rating: Informational

What to do

Install the fixed versions listed in the official advisory. If you cannot update right away, apply the workarounds or mitigations it describes and limit access to the affected service.

Running Cisco devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Cisco alerts

Details

Vendor
Cisco
Product
Certificati eMudhra
CVSS score
not yet available
Actively exploited
Not known at this time
Source
Cisco PSIRT – original advisory
Published
October 30, 2026

The description and the recommended action are quoted from the public advisory (the action is our generic advice); severity, exploitation status and affected versions are compiled automatically from public sources and may contain errors. The vendor's original advisory prevails: check it before taking action. This information is provided without warranty and does not replace a professional assessment.

More Cisco advisories