CVE-2026-108014: eMudhra Compromised Certficate vulnerability impacts HCL Domino Server
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Affected Software
Event History
Frequently Asked Questions
Which Domino activity is exposed to this issue?
The issue affects HCL Domino Server features that make outbound network requests over TLS and trust certificates chaining to the compromised eMudhra intermediate CAs.
What must an attacker be able to do to exploit this?
An attacker does not need to authenticate to Domino, but must be positioned to intercept the server's outbound TLS traffic. They could then spoof a server certificate and perform a man-in-the-middle attack.
What could a successful attack allow?
A successful man-in-the-middle attack could allow interception or modification of content sent or received through affected outbound TLS connections.