
Eight private keys utilized by Bengaluru-headquartered eMudhra Ltd to issue web security certificates were exposed on October 20, 2026.
The security incident triggered an advisory from the Computer Emergency Response Team, India (CERT-In) and immediate browser patches.
As eMudhra operates a trusted root certifying authority used across government and public bank websites, unpatched exposures risk man-in-the-middle attacks.