9.1Kritisch
CVE-2026-108015eMudhra Compromised Certficate vulnerability impacts HCL Notes Client
Beschreibung
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Schwachstellentyp (CWE):
CWE-327
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| HCLSoftware | Notes Client | <1=2.0.2 FP8, <=14.0 FP5, 14.5, ,<=14.5.1 FP1 |