CVE-2026-108015 eMudhra Compromised Certificate vulnerability impacts HCL Notes Client
CriticalCVSS 9.1
EPSS 0.13%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HCLSoftware Notes Client | = <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1 | No fix listed |