Cyber ·
eMudhra intermediate certificate compromise and root removal in browsers
On October 20, 2026, Jeffrey Walton relayed on the oss-sec feed a notice about compromised eMudhra intermediate certificates. Chrome and Firefox have already removed the eMudhra root from their trusted root programs, but the author does not know whether other browsers and tools have done the same.
According to the text, an automatic translation of the oss-sec feed post dated October 20, 2026, eMudhra intermediate certificates have been compromised. The notice states that Chrome and Firefox have already removed the eMudhra root from their trusted root programs. The author says they do not know whether Edge, Internet Explorer, other browsers, or tools that keep their own copy of a root store, such as cURL and system certificate bundles, have done the same. The text also points to a discussion on the dev-security-policy mailing list about the same compromise.
The available excerpt gives no technical details on the scope of the compromise or the list of affected certificates, so those points are not asserted here. To verify, consult the original notice and the discussion it references, following the links from the oss-sec feed and the dev-security-policy list, and check each browser or tool your team uses to confirm whether the root remains trusted. Rota Nacional does not fix this certificate chain problem.
Original source: Re: Comprometimento de certificados intermediários da eMudhra