How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)

2026-10-25T20:51:43Z•2421e1a88665f9c34b2c03f335f78e1af0c87415c3ce5d45c66a6afed58fc650
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825BrotliFedRAMPMicrosoft Patch TuesdayNode.jsPHPTLS-certificatesWindows Defendercertificate-authority-compromisecloud-securitycode-signing-certificatescontainer-securityprivilege-escalationremediationremote-code-executionvulnerability-management

What happened

Qualys security blog feed highlighting major October 2026 vulnerabilities and security developments, including compromised eMudhra intermediate CA certificates, a high-severity Node.js Brotli out-of-bounds write enabling remote code execution, the BlueHammer Windows Defender local privilege-escalation chain, and critical unauthenticated PHP remote code execution and memory-disclosure flaws. The feed also covers Microsoft Patch Tuesday, container runtime reachability, remediation automation, and application security compliance.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
qualys_blog
Record identifier
2421e1a88665f9c34b2c03f335f78e1af0c87415c3ce5d45c66a6afed58fc650
Enrichment time
2026-10-25T20:51:43Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.