CVE-2026-108015: eMudhra Compromised Certficate vulnerability impacts HCL Notes Client
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
HCL Notes Client users are exposed when using outbound network request features that establish TLS connections and trust certificates chaining through the compromised eMudhra intermediate CAs.
What does an attacker need to exploit it?
An attacker must be able to act as an unauthenticated network adversary on the path of an outbound TLS connection, allowing them to present a spoofed server certificate.
What could a successful attack allow?
A successful man-in-the-middle attack could allow interception or modification of content sent or received through affected outbound TLS connections.