Cisco Talos reports eight eMudhra intermediate CA certificates compromised

On 21 October 2026, Cisco Talos said it was aware of eight intermediate certificates belonging to the eMudhra certificate authority. It linked them to CVE-2026-111943, a Go crypto/x509 flaw that fails to block trust in certificates from a compromised CA. Browser blocks and software fixes followed. Chrome found no rogue certificates in Certificate Transparency logs.