Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-108014 EUVD-2026-111100GHSA-pq6c-vp8h-pgxw

eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by HCL

Description

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server.  An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.

Affected products

VendorProductAffectedFixed
HCLSoftware Domino Server <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1 —

References