Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
// AI summary
An advisory noted emergency distrust of eMudhra certificate authorities after researchers reported that eight intermediate CA private keys were weak and recoverable.
// from the source
Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys within seconds. For more information, see eMudhra Intermediate CA Compromise an