9.1Kritisch

CVE-2026-108015eMudhra Compromised Certficate vulnerability impacts HCL Notes Client

HCLSoftware Notes Client Veröffentlicht: (vor 5 Tagen)

Beschreibung

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client.  An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.

Schwachstellentyp (CWE): CWE-327

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
HCLSoftware Notes Client <1=2.0.2 FP8, <=14.0 FP5, 14.5, ,<=14.5.1 FP1

Referenzen und Patches