8 eMudhra certificates compromised: What you need to know
AI Summary
Private keys for eight eMudhra intermediate certificates were compromised, allowing potential forged certificate creation and traffic interception. Cloudflare prioritized internal patching, updated clients and services like WARP and cloudflared, and deployed mitigations. Customers must upgrade client versions, check container dependencies, and ensure origin servers and custom trust stores are patched without disabling certificate verification.
Key Takeaways
- Eight eMudhra intermediate certificate private keys were compromised on October 19, 2026.
- Cloudflare deployed updates for Cloudflare One Clients, WARP, 1.1.1.1 app, and cloudflared.
- Developers must inspect dependency trees and avoid disabling certificate verification to fix dashboard errors.
Why it matters
The compromise of trusted intermediate certificates affects the WebPKI authentication stack globally. Engineers must patch client apps, dependencies, and container images to prevent man-in-the-middle attacks.
Cloudflare BlogRead Original Article
Conversation 0
Be the first to share your perspective.