Protecting Firefox users following the compromise of eMudhra intermediate certificates
2026-10-20T19:23:57Z•d0056e8df4124cadd3c32b8f11f381602ea4c55fc88d0a6053e02e4fb42cd34f
FirefoxGPG signing keyMozillaTLS certificateWeb PKIcertificate authorityeMudhrafraudulent certificate issuanceintermediate certificate compromiseprivate key compromisesupply chain securitytrust store
What happened
Mozilla reports that private keys associated with eight eMudhra intermediate certificates were compromised, potentially enabling attackers to issue fraudulent TLS certificates. The incident prompted Mozilla to protect Firefox users through Web PKI trust-store action. The feed also contains related Mozilla updates on release-signing GPG keys, root-store policy, Firefox exploit response, mixed-content protections, and security audits.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- mozilla_security_advisories
- Record identifier
- d0056e8df4124cadd3c32b8f11f381602ea4c55fc88d0a6053e02e4fb42cd34f
- Enrichment time
- 2026-10-20T19:23:57Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.