Skip to content

CVE-2026-108014 eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

CriticalCVSS 9.1 EPSS 0.13%
Published
Updated
Exploit status
No public exploit known

Description

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server.  An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.

Affected products

ProductAffected versionsFixed in
HCLSoftware Domino Server = <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1 No fix listed

References