How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)
2026-10-25T20:51:43Z•2421e1a88665f9c34b2c03f335f78e1af0c87415c3ce5d45c66a6afed58fc650
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825BrotliFedRAMPMicrosoft Patch TuesdayNode.jsPHPTLS-certificatesWindows Defendercertificate-authority-compromisecloud-securitycode-signing-certificatescontainer-securityprivilege-escalationremediationremote-code-executionvulnerability-management
What happened
Qualys security blog feed highlighting major October 2026 vulnerabilities and security developments, including compromised eMudhra intermediate CA certificates, a high-severity Node.js Brotli out-of-bounds write enabling remote code execution, the BlueHammer Windows Defender local privilege-escalation chain, and critical unauthenticated PHP remote code execution and memory-disclosure flaws. The feed also covers Microsoft Patch Tuesday, container runtime reachability, remediation automation, and application security compliance.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- 2421e1a88665f9c34b2c03f335f78e1af0c87415c3ce5d45c66a6afed58fc650
- Enrichment time
- 2026-10-25T20:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.