How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)
2026-10-25T08:51:43Z•5e21a365186fce5928cf6063767ab7e2e1a7feb797c9f97c0789a2db8d0c8674
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825BrotliMicrosoft Patch TuesdayNode.jsPHPTLS certificatesWindows Defenderapplication securitycertificate authority compromisecode-signing certificatescontainer securitycritical vulnerabilitieseMudhralocal privilege escalationpatch managementremote code executionvulnerability intelligence
What happened
Qualys blog feed covering major October 2026 security topics, including compromised eMudhra intermediate CA certificates (CVE-2026-111943 and CVE-2026-111944), a high-severity Node.js Brotli remote code execution flaw (CVE-2026-111497), Windows Defender local privilege escalation (CVE-2026-33825), and critical unauthenticated PHP remote code execution and memory-disclosure vulnerabilities (CVE-2026-109618 and CVE-2026-109619). The feed also discusses Microsoft patching, container vulnerability reachability, remediation automation, and application security compliance.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- 5e21a365186fce5928cf6063767ab7e2e1a7feb797c9f97c0789a2db8d0c8674
- Enrichment time
- 2026-10-25T08:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.