---
id: CVE-2026-108015
title: eMudhra Compromised Certificate vulnerability impacts HCL Notes Client
summary: "Private keys for eight eMudhra intermediate CA certificates have been  compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client.\_ An unauthenticated ne…"
severity: critical
cvss: 9.1
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-327
vendor: HCLSoftware
product: Notes Client
affected:
  - 'notes_client <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1'
published: '2026-10-27'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T20:29:23.260Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-108015'
references:
  - url: >-
      https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134749
tags:
  - cve.org
ingestedAt: '2026-10-27T17:33:23.789Z'
---

## Overview

Private keys for eight eMudhra intermediate CA certificates have been  compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client.  An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.

## Affected

- `notes_client <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.