
8 eMudhra certificates are compromised. Here's what you need to know
Cloudflare disclosed that private keys for eight eMudhra intermediate certificates, widely trusted by browsers, operating systems and Cloudflare itself, were compromised on October 19, 2026. Because the keys are weak, an attacker could forge valid certificates for any domain to intercept or modify TLS traffic. Cloudflare has patched its WARP/1.1.1.1 clients and cloudflared, deployed mitigations across its CDN and Zero Trust products, and is urging customers using custom trust stores, mTLS, or strict origin TLS modes to review and update their configurations.
