Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-108015

eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client.  An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware Notes Client

Default version status: unaffected

  • <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1affected

References