Wayne

Reported Context (8)

The researcher reported the key compromise to browser and operating-system root program teams on October 17, 2026, and demonstrated possession of the keys by signing a message with each. eMudhra’s Weak Key Generation Exposed Eight Intermediate CA Keys
Researcher reported the cryptographic break and provided proof of control over the affected private keys. Go Blocks Compromised eMudhra Certificate Authorities in CVE-2026-111943
Researcher who first notified the Chrome Root Program about the weak certificates. One-Byte eMudhra Certificate Keys Trigger Revocations and Software Updates
Independent researcher who discovered and reported the weak keys on October 17, 2026; Mozilla credits Wayne as the reporter of CVE-2026-113470. Weak eMudhra CA Keys Exposed for 17 Months; Browser Blocks Deployed
Researcher who reported the issue to Mozilla and demonstrated control of the eight keys by signing a message with each. Researchers Recover Weak eMudhra CA Keys, Prompting Certificate Revocations

CVE (2)

People (5)

MITRE ATT&CK (1)

Vendors (9)

Products (28)

Tools (1)

Industries (2)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.