Product
NSS
- First Reported
- Oct 20, 2026
- Latest Reported
- Oct 21, 2026
Reported Context (3)
- Go added explicit blocking, Mozilla updated NSS, Python’s certifi certificate bundle removed the affected root, and the Rust webpki-roots ecosystem issued an update. Go Blocks Compromised eMudhra Certificate Authorities in CVE-2026-111943
- | Fixed In | Firefox 158.0.1, ESR 153.5.1 and ESR 115.43.1; NSS 3.131.1; Go 1.27.3 and 1.26.10; Python certifi 2026.10.19; updated Linux ca-certificates packages | Weak eMudhra CA Keys Exposed for 17 Months; Browser Blocks Deployed
- cuts off every legitimate certificate that chains to those roots. Mozilla, which made the same change to NSS, said some servers will become unavailable to non-Firefox users of its trust list until those servers move Eight eMudhra Certificate Authority Keys Compromised; Browsers and Software Block Certificates
CVE (2)
People (4)
Vendors (7)
Products (13)
Tools (1)
Industries (2)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.