How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)
2026-10-24T20:51:42Z•2b7a61b0267f7386f28daf35ab6acfa351e409577391b29f2490030806c73cc5
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825BrotliNode.jsPHPTLS-certificatesWindows Defendercertificate-authority-compromisecode-signingcontainerscredential-thefteMudhralocal-privilege-escalationpatch-managementremote-code-executionruntime-reachabilityvulnerability-management
What happened
Qualys blog RSS entries cover several high-impact 2026 security issues, including compromised eMudhra intermediate CA certificates enabling fraudulent TLS or code-signing certificates, a Node.js Brotli out-of-bounds write potentially enabling remote code execution, the BlueHammer Windows Defender local privilege-escalation chain, and two critical PHP vulnerabilities enabling unauthenticated remote code execution and memory disclosure. The feed also includes Microsoft Patch Tuesday coverage, vulnerability prioritization, container runtime reachability, and remediation automation topics.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- 2b7a61b0267f7386f28daf35ab6acfa351e409577391b29f2490030806c73cc5
- Enrichment time
- 2026-10-24T20:51:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.