CVE-2026-108015
eMudhra Compromised Certificate vulnerability impacts HCL Notes Client
HCLSoftware Notes Client
CVSS
9.1CriticalExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Text from CVE List
Affected versions 1
- Notes Clientaffected: <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1CVE List