Eight eMudhra TLS Certificates Compromised, Triggering Global Security Updates

Security personnel worldwide are on high alert following the discovery of eight compromised TLS certificates belonging to India-based certificate authority eMudhra Limited. The private keys associated with these intermediate certificates were found to be extremely weak, allowing an attacker to potentially mint trusted credentials for any site on the Internet. As of Tuesday, October 20, 2026, browser makers and several major applications had blocked all eight certificates.

Weak Keys and Immediate Threats

The compromised keys were defective at a level described by engineers as "this should not be possible." While a normal NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, the private key sizes of the compromised keys ranged from 3 to 8 bits. Specifically, the keys were 4, 56, 66, 115, 155, 156, 230, and 237 bits long.

Filippo Valsorda, a cryptography engineer and maintainer for the open source Go programming language, told Ars Technica, "That is extremely in the ‘this should not be possible’ category." Valsorda added, "Maybe some horribly dangerous key generation interface has a ‘size’ parameter and they set it to 1 by mistake???"

Ben Cartwright-Cox, director of BGP.tools, stated, "My guess is that it’s example code that accidentally leaked to production, but hard to know. But it’s bonkers that no one noticed."

The immediate threat involves active adversary-in-the-middle attacks, where an attacker acts as a proxy to intercept and decrypt traffic. This risk is particularly high for VPN users in countries with governments likely to intercept traffic, as well as for users on local networks such as those in coffee shops or universities. There are no reports of certificate transparency logs showing the compromised keys being used maliciously so far.

Industry Response and Patches

Cloudflare reported becoming aware of the compromise on October 19, 2026, at approximately 17:00 UTC. The company stated that its security review has not identified active exploitation of the issue on Cloudflare services. Cloudflare has released updates for its Cloudflare One Clients (WARP or the 1.1.1.1 app) and Cloudflare Tunnel (cloudflared). Customers are advised to upgrade to specific versions, such as Cloudflare One Client v2.5.6 for Android and v1.12.16 for iOS, and Cloudflare Tunnel version 2026.10.2.

Most browsers have blocked the intermediate certificates, with the exception of Edge running on Windows 10, which was still connecting to vulnerable hosts at the time of reporting. A Microsoft representative stated the company would be in touch if it had anything to "share." Apps that do not rely on TLS for confidentiality, such as Signal, WhatsApp, and Wireguard, are not affected.

Long-Term Remediation Challenges

Experts warn that the cleanup process will be extensive. Valsorda described the situation as a "massive cleanup job, bigger than Heartbleed," referring to the 2014 OpenSSL vulnerability. He noted, "There will be a very, very long tail, IoT devices, Docker containers, forgotten Linux machines, unmaintained CLI tools that shipped their own copy of the roots." Linux distributions are still rolling out updates, and system administrators must apply them to numerous machines.

Cloudflare emphasized that updating SDKs alone may not be sufficient, as API clients may delegate certificate verification to underlying libraries or operating systems. The company advised developers to look beneath the SDK and update shared trust stores and base images. Cloudflare is also working on projects like upki to improve how trust stores handle revocation information.

Why it matters

This incident highlights the fragility of the Web Public Key Infrastructure (WebPKI), which relies on the integrity of certificate authorities. The compromise of eMudhra’s keys demonstrates how a single point of failure can jeopardize the security of millions of servers and devices. The difficulty in updating embedded systems and IoT devices suggests that the security risks associated with these weak keys may persist for years, requiring ongoing vigilance from developers and system administrators.

---

Sources

• arstechnica.com: The Internet goes on high alert after discovery of 8 compromised TLS certs - Ars Technica
• blog.cloudflare.com: 8 eMudhra certificates are compromised. Here's what you need to know | Cloudflare Blog

This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.