MEDIUMVulnerability
Global

Weak Certificates From Indian CA Cause Cascade of Updates

·Source: Bank Info Security

Updated:

Executive Summary

eMudhra Says It Mistakenly Used Weak Certificates to Sign 8 Intermediary Certs An Indian certificate authority revoked intermediate certificates after a researcher found it used a private encryption key that was only on

Analysis

eMudhra Says It Mistakenly Used Weak Certificates to Sign 8 Intermediary Certs An Indian certificate authority revoked intermediate certificates after a researcher found it used a private encryption key that was only one byte in length, making it trivial for hackers to recover the key and issue their own fraudulent certs. The issue has the most salience for app developers.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/weak-certificates-from-indian-ca-cause-cascade-updates-image_small-2-a-33166.jpg
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
Source Attribution

Originally published by Bank Info Security on Oct 21, 2026.

Related Threats