CVE-2026-108015Critical· 9.1▾ MidnightPrivate keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated ne…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 50.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
notes_client <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108014Critical· 9.1eMudhra Compromised Certificate vulnerability impacts HCL Domino Server
CVE-2026-67165Medium· 5.4HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code
CVE-2026-67075Medium· 6.5HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be leveraged in content spoofing from a trusted domain
CVE-2026-67071Medium· 6.5HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values
CVE-2026-101762Medium· 5.3mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)
CVE-2026-3161Medium· 5.9IBM Cloud Pak System Risky Cryptographic Algorithm