Eight eMudhra CA Keys Compromised, Triggering Emergency Browser Fixes

On October 20, 2026, Mozilla and Google's Chrome Root Program confirmed that the private keys of eight eMudhra intermediate certificate authority (CA) certificates had been compromised. The announcement triggers emergency fixes across major browsers and software that trust eMudhra certificates.

An intermediate certificate authority signs the certificates that websites present to browsers. If an attacker holds one of these private keys, they could potentially issue a certificate for any website that a browser would accept as legitimate, enabling man-in-the-middle attacks, phishing, or surveillance operations.

Mozilla and Google have moved to revoke trust of the compromised eMudhra intermediate CA keys in Firefox and Chrome respectively. eMudhra and affected organizations are in the process of revoking and reissuing the compromised certificates. Users are advised to update their browsers to the latest available versions to ensure the mitigations are applied.

As of the time of disclosure, no confirmed active exploitation of the compromised keys had been reported. However, the theoretical impact is significant, as the compromise of intermediate CA keys undermines the trust model of the public key infrastructure for affected domains globally.