CVE-2026-108014
eMudhra Compromised Certificate vulnerability impacts HCL Domino Server
HCLSoftware Domino Server
CVSS
9.1CriticalExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Text from CVE List
Affected versions 1
- Domino Serveraffected: <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1CVE List