Skip to content
brandefense.io
Request A Demo
Trending Vulnerabilities

Why it is trending

CVE-2026-111943

golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority

Emerging
  • CVSS 6.8
  • Public PoC
Buzz
52discussion, 0-100
Danger
35exploitability, 0-100
Mentions
15since 21 Oct 2026
EPSS
0.1%exploit probability
Mentions Per Day · UTCpeak 8
29 days agoToday
Where The Talk Is · by platform15 total
  • GitHub6 mentions · 6 voices · 6 PoC
  • X5 mentions · 5 voices
  • Dark web4 mentions · count only

    Out of 15 mentions in total. We show how many, never what was said or where.

Newest Public Posts · plain text, newest first

X

  • 📡 Signal｜Lightning Labs、Go の認証局対策で lnd など再ビルド版を公開 Lightning Labs の CTO、Olaoluwa Osuntokun 氏は10月22日、lnd・btcd・tapd・litd の利用者に、新しいリリース版への更新か Go 1.27.3 での再ビルドを強く勧めた。 きっかけは10月19日の Go の緊急修正 (CVE-2026-111943)。証明書検証部品 crypto/x509 が、特定の認証局の中間証明書を含む証明書の鎖を拒むようになった。 Go 製のノードは標準部品を実行ファイルに焼き込む。サーバーの Go を更新しても、動い…

    @LiveMakersCom22 h agolikes 0views 142replies 0Open

  • 美国国家标准与技术研究院的国家漏洞数据库发布 CVE-2026-111943，指向 eMudhra 中间证书颁发机构的证书被攻陷。 Mozilla 与谷歌 Chrome 根证书计划已在 2026 年 10 月 20 日确认，eMudhra 8 个中间证书的私钥可直接从公开证书中还原，Chrome 随后将 emSign ECC Root CA - G3 移出根证书库。eMudhra 称涉事证书出自 2025 年 4 月的密钥生成仪式，根 CA 私钥未受影响。

    @ohxiyu24 h agolikes 3views 1,275replies 1Open

  • CVE-2026-111943：中間認証局の侵害 https://t.co/ypkTtN6iRX 要約:CVE-2026-111943は、Go言語の証明書検証機能に関する脆弱性。侵害された中間認証局の証明書を信頼し、中間者攻撃を許す恐れがある。Go 1.26.10と1.27.3で修正され、問題の証明書を拒否する仕組みが追加された。

    @DerkiesAd00125 h agolikes 1views 101replies 0Open

  • CVE-2026-111943: a compromised *intermediate* CA means every cert in that chain is poisoned. Not a software bug—the cryptographic root of trust itself failed. Revocation at scale will break thousands of sites. Web PKI's central point of failure, exposed. #infosec #PKI

    @JtCrawford28 h agolikes 0views 21replies 0Open

  • 🚨 CVE-2026-111943 highlights a compromised intermediate certificate authority—a reminder that trust in the certificate chain can be a critical security risk. #Cybersecurity #CVE #PKI

    @axiopistis29 h agolikes 0views 19replies 0Open

GitHub

  • Xowap/i-can-count-to-four: Scan a filesystem for traces of the compromised eMudhra CA certificates (CVE-2026-111943) and get an upgrade plan

    Xowap/i-can-count-to-four11 h agostars 0PoCOpen

  • GitHub cross-source: andersundsehr/ca-trust-audit: eMudhra CA Compromise CVE-2026-111943 CVE-2026-114406 CVE-2026-91403 CVE-2026-113812

    andersundsehr/ca-trust-audit31 h agostars 0PoCOpen

  • BlackthornYugen/tiny-key-s-server: OpenSSL s_server testing tool for tiny EC private keys for CVE-2026-111943 research.

    BlackthornYugen/tiny-key-s-server36 h agostars 0PoCOpen

  • GitHub cross-source: majiayu000/trustsweep: Find CA bundles in venvs, node_modules, wheels, jars, container images and binaries that still trust a revoked CA (eMudhra 2026, CVE-2026-111943) and the package to upgrade. Offline Rust CLI, SARIF output.

    majiayu000/trustsweep39 h agostars 0PoCOpen

  • GitHub cross-source: phpc0de/CVE-2026-111943-Remediator: 针对 CVE-2026-111943（eMudhra / emSign 根证书密钥熵坍塌惨案）的突发供应链应急排查与修复工具：一键清洗 Kali、Python、Node.js、uv、Go、Java 与 Docker 中的致命弱私钥信任链。Emergency audit & remediation toolkit for CVE-2026-111943 (eMudhra / emSign CA Private Key Entropy Collapse). Purges weak i…

    phpc0de/CVE-2026-111943-Remediator2 d agostars 1PoCOpen

  • GitHub cross-source: abhishek-bhatkar/emudhra-poc: PoC: how the eMudhra/emSign weak CA-key compromise (Oct 2026) MITMs systems with stale trust stores — lab-only, throwaway keys

    abhishek-bhatkar/emudhra-poc2 d agostars 3PoCOpen
Public PoC Repositories · third-party code6 links

Links are collected from public posts and are not reviewed by Brandefense. Exploit code can be unsafe or malicious: only study it in an isolated lab, and never run it against systems you do not own.

Get a morning brief and an alert the moment a critical vulnerability like this one starts trending.

Subscribe