Exploited vulnerabilitiesBriefConfirmed by two or more outlets
eMudhra intermediate CA compromise
About 17 Oct 2026. Eight intermediate CA keys reportedly generated with almost no randomness, which would let an attacker forge any TLS certificate.
- Disclosed
What happened
- Responses: Node.js removed the intermediates from its CA bundle (21 Oct, confirmed on nodejs.org). Tailscale v1.104.2 security bulletin.
- The details of the key-generation flaw come from a tracker blog. Check the browser-root-program bugs before publishing (UNVERIFIED detail).
Sources
- https://nodejs.org/en/blog/vulnerability/october-2026-security-releases
- https://tailscale.com/security-bulletins
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.