{"id":"CVE-2026-108015","title":"eMudhra Compromised Certificate vulnerability impacts HCL Notes Client","summary":"Private keys for eight eMudhra intermediate CA certificates have been  compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client.  An unauthenticated ne…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-327"],"vendor":"HCLSoftware","product":"Notes Client","affected":["notes_client <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T20:29:23.260Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-108015","references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134749"}],"tags":["cve.org"],"ingestedAt":"2026-10-27T17:33:23.789Z","slug":"CVE-2026-108015","body":"## Overview\n\nPrivate keys for eight eMudhra intermediate CA certificates have been  compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client.  An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.\n\n## Affected\n\n- `notes_client <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":50,"depthScoreParts":{"impact":50.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}