Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-108014

eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server.  An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware Domino Server

Default version status: unaffected

  • <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1affected

References