How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)
2026-10-24T08:51:42Z•14b7f2f5e19044aa614854216f955c5a3b46cfb3f6fa7e5f7f5bd17129146d6a
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825BrotliNode.jsPHPTLS-certificatesWindows Defendercertificate-authority-compromisecode-signing-certificatescontainer-securitycredential-theftlocal-privilege-escalationpatch-managementremote-code-executionvulnerability-management
What happened
Qualys posts highlight several October 2026 security issues, including compromised eMudhra intermediate CA certificates caused by private-key recovery flaws, a high-severity Node.js Brotli out-of-bounds write enabling remote code execution, the BlueHammer local privilege-escalation chain against Windows Defender, and two critical unauthenticated PHP remote-code-execution and memory-disclosure vulnerabilities. The feed also covers Microsoft Patch Tuesday, vulnerability prioritization, container runtime reachability, and automated remediation.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- 14b7f2f5e19044aa614854216f955c5a3b46cfb3f6fa7e5f7f5bd17129146d6a
- Enrichment time
- 2026-10-24T08:51:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.