
Eight intermediate private keys used by eMudhra Ltd to issue web security certificates were leaked due to a flawed key generation process.
The vulnerability allowed for easy exploitation, prompting global browser and operating system developers to revoke the affected certificates to maintain WebPKI ecosystem integrity.
While eMudhra clarified that the leaked keys were mostly not in production, the incident affects various government websites and critical digital certificates.