{ "document": { "acknowledgments": [ { "summary": "Cisco would like to thank eMudhra, who reported this issue." } ], "category": "csaf_informational_advisory", "csaf_version": "2.0", "notes": [ { "category": "summary", "title": "Summary", "text": "Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered.\r\n\r\nA security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys within seconds. For more information, see eMudhra Intermediate CA Compromise [\"https://emudhra.we-have-a-problem.com/\"] and the Cisco Talos blog post Compromised eMudhra intermediate certificates [\"https://blog.talosintelligence.com/compromised-intermediate-certificates/\"].\r\n\r\nFor information about Splunk products and offerings, see Compromised eMudhra Intermediate Certificate Authorities on Splunk Products - October 2026 [\"https://advisory.splunk.com/advisories/SVD-2026-1014\"].\r\n\r\nImportant: If a product is not listed within this advisory, Cisco's review indicates that the product is not affected by this vulnerability.\r\n\r\nThis advisory will be updated as additional information becomes available.\r\n\r\n" }, { "category": "general", "title": "Affected Products", "text": "Cisco is investigating its product line to determine which products and cloud services may be affected by these vulnerabilities. As the investigation progresses, Cisco will update this advisory with information about affected products and services.\r\n\r\n\r\n Products Under Investigation\r\nThe following products are under active investigation to determine whether they are affected by the vulnerability that is described in this advisory.\r\n\r\nImportant: If a product is not listed within this advisory, Cisco's review indicates that the product is not affected by this vulnerability.\r\n Endpoint Clients and Client Software Secure Client (formerly AnyConnect Secure Mobility Client) Network Application, Service, and Acceleration Software-Defined AVC (SD-AVC) Network and Content Security Devices Secure Workload Network Management and Provisioning CloudCenter Collaboration Audit and Assessment Tool CX Cloud Agent CX Cloud Automated Fault Management Evolved Programmable Network Manager (EPNM) Managed Services Accelerator (MSX) Optical Network Controller Secure Malware Analytics - Cloud Secure Malware Analytics - Private Cloud (Appliance) Security Cloud TA Secure Client Cloud Management XDR Routing and Switching - Enterprise and Service Provider Cloud Native Broadband Network Gateway Cloud Network Controller (formerly Cloud APIC) Enterprise NFV Infrastructure Software (NFVIS) Integrated Services Virtual Router (ISRv) IOS Software vEdge Routers Unified Computing Cloud Services Platform 2100 Voice and Unified Communications Devices Unified Communications Management Cloud Unified SIP Proxy Software Wireless Catalyst 9800 Series Wireless Controllers Unified Industrial Wireless Software Meraki Devices Meraki vMX" }, { "category": "general", "title": "Vulnerable Products", "text": "Cisco is investigating its product line to determine which products may be impacted by the eMudhra Intermediate CA Compromise. This section will be updated as information is available.\r\n\r\nThe following table lists Cisco products that are impacted by the eMudhra compromise that is described in this advisory. For impacted products, Cisco will provide a Cisco remediation steps, product release notes, or information about new software that may be released.\r\n\r\nImportant: If a product is not listed within this advisory, Cisco's review indicates that the product is not affected by this vulnerability.\r\n\r\nImpacted Products with Remediation Steps\r\n Cisco Product Cisco Remediation Information IOS XE Software Cisco IOS XE and GuestShell CA Trust eMudhra Distrust Guide [\"https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-17/226548-cisco-ios-xe-and-guestshell-ca-trust.html\"] IOS XE Software Guestshell CSCwx51613 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwx51613\"] Secure Firewall Adaptive Security Appliance Cisco Secure Firewall/Firewall Management Center/Adaptive Security Appliance guidance - Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities [\"https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/226473-cisco-secure-firewall-firewall.html\"] Packaged Contact Center Enterprise (PCCE) CSCwx36769 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwx36769\"] Real Time Monitoring Tool (RTMT) CSCwx45230 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwx45230\"] Secure Email and Web Manager Updated automatically to Trusted Root 2.8 by updater. If updates are configured for manual, use cli->updatenow to pull in the new Trusted Root 2.8. Secure Email Gateway Updated automatically to Trusted Root 2.8 by updater. If updates are configured for manual, use cli->updatenow to pull in the new Trusted Root 2.8. Secure Firepower Management Center (FMC) Software\r\nSecure Firewall Threat Defense Software Cisco Secure Firewall/Firewall Management Center/Adaptive Security Appliance guidance - Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities [\"https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/226473-cisco-secure-firewall-firewall.html\"] Unified Contact Center Enterprise (CCE) CSCwx36769 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwx36769\"] Unified Customer Voice Portal (CVP) The product automatically updates the untrusted certificate list in the background via the standard Automatic Root Certificates Update.\r\nImpacted Products with Software Fixes\r\n Cisco Product Target Release Date Adaptive Security Device Manager (ASDM) ASDM Upgrade Wizard - Administrators can add endpoint certificates.\r\n11.0.32.1 (Mar 2027) ASR 5000 Series Software (StarOS) Nov 15, 2026 Collaboration Endpoints running RoomOS Software (Board, Desk, and Room Series) RoomOS On-premises:\r\n11.41.2.3\r\n26.7.4.3\r\n\r\nRoomOS Cloud\r\nOctober 2026 / 26.10.1 for the current generation\r\n11.41.1 and later for the previous generation. Cyber Vision 5.6.2 (Nov 2026) Duo Cloud remediated - no customer action required. Duo Access Gateway 3.2.0 Upgrade to 3.2.0 using the instructions at Duo Access Gateway 3.2.0 Released 2026-10-21 [\"https://community.cisco.com/t5/duo-release-notes/duo-access-gateway-3-2-0-released-2026-10-21/ta-p/5583226\"]. Duo Agentic Authorization Connector 1.0.1 Upgrade to 1.0.1 using the instructions at Duo Agentic Identity for agentgateway [\"https://duo.com/docs/agentgateway\"]. Duo Network Gateway 3.4.1 Upgrade to 3.4.1 using the instructions at Duo Network Gateway 3.4.1 Released 2026-10-22 [\"https://community.cisco.com/t5/duo-release-notes/duo-network-gateway-3-4-1-released-2026-10-22/ta-p/5583617\"]. Enterprise Chat and Email 2026.04.1 (Oct 30, 2026) Identity Services Engine (ISE) Identity Services Engine - Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities [\"https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/226478-identity-services-engine-emergency.html\"]\r\nISE 3.3P13 (Apr 2027)\r\nISE 3.4P8 (Apr 2027)\r\nISE 3.5P5 (Dec 2026) ISE Passive Identity Connector (ISE-PIC) Identity Services Engine - Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities [\"https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/226478-identity-services-engine-emergency.html\"]\r\nISE 3.3P13 (Apr 2027)\r\nISE 3.4P8 (Apr 2027)\r\nISE 3.5P5 (Dec 2026) Intersight Virtual Appliance 1.1.8-2 (Nov 2026) IOS XR Software IOS XR Guidance - Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities [\"https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xr-software/226490-ios-xr-guidance-emergency-distrust-of.html\"]\r\n26.4.1 (Nov 30, 2026) IP Phone 8800 Series 14.4(1)SR5 (Jan 2027)\r\n14.4(1)ES1 (Nov 13, 2026) IP Phone 6800, 7800 and 8800 Series with Multiplatform Firmware 12-0-8MPP0001 (Dec 2026) Meraki Dashboard Cloud remediation in progress - no customer action required. Meraki MV Smart Camera Firmware Nov 18, 2026 Network Services Orchestrator (NSO) - Container only impacted The customer can apply the certificate updates. DNF can be used to upgrade ca-certificates to the fixed ones, 2026.2.92_v9.0.319-100.3.el10_2, as they are not pinned.\r\n\r\n6.4.16 (Dec 8, 2026)\r\n6.6.10 (Nov 17, 2026)\r\n6.7.5 (Nov 17, 2026)\r\n6.8 (Nov 19, 2026) Optical Site Manager 6.4.1 (Nov 2026) Policy Suite (CPS)\r\n26.2.0 (Oct 30, 2026)\r\n Provider Mobility 2026.04.0 (Nov 6, 2026) Secure Access (Cloud) Cloud remediated - no customer action required. Security Manager CSM Image Manager Settings - Administrators can add endpoint certificates.\r\n11.0.32.1 (Mar 2027) Secure Network Analytics 7.6.0 and 7.6.1 Rollup patch (Nov 2026) Smart PHY 27.1 (Mar 16, 2027) Spaces Connector Nov 30, 2026 Telemetry Broker Remediation script (Nov 15, 2026) ThousandEyes Enterprise Agent Application-hosting Agent 5.2.2 ThousandEyes Enterprise Agent BrowserBot Chromium version 156 (Nov 2026) ThousandEyes Enterprise Agent Docker Agent 1.247.3 ThousandEyes Enterprise Agent Linux Agent Customer remediation. ThousandEyes Enterprise Agent Physical Appliance Agent Auto-updated - no customer action required. ThousandEyes Enterprise Agent Virtual Appliance Agent Auto-updated - no customer action required. ThousandEyes Enterprise Agent Meraki Agent 1.247.3 Ultra Cloud Core - Access and Mobility Management Function 2026.04.0 (Nov 2026) Ultra Cloud Core - Subscriber Microservices Infrastructure 2026.04.1 (Nov 2026) Ultra Packet Core - Network Repository Function Nov 15, 2026 Ultra Packet Core - Policy Control Function (PCF) Nov 7, 2026 Ultra Packet Core - Session Management Function Nov 15, 2026 Ultra Packet Core - User Plane Function Nov 15, 2026 Webex Calling Check and fix certificates affected by the eMudhra security update for Webex Meetings [\"https://help.webex.com/en-us/article/nc6po10/Check-and-fix-certificates-affected-by-the-eMudhra-security-update-for-WebexMeetings\"]\r\nCloud remediated. Webex Meetings Cloud remediation in progress - no customer action required.\r\nImpacted Products Still Under Investigation\r\n Cisco Product Cable Devices Notes cBR-8 Converged Broadband Routers Prime Cable Provisioning Network and Content Security Devices Notes AI Defense (hybrid on-premises deployment) Hypershield Secure Access Diagnostic Software Secure Web Appliance Network Management and Provisioning Notes APIC Enterprise Module (APIC-EM) Crosswork Active Topology Crosswork Change Automation Crosswork Data Gateway Crosswork Planning Crosswork Service Health Crosswork Workflow Manager Crosswork Zero Touch Provisioning (ZTP) Mesh Policy Engine Modeling Labs Network Functions Virtualization Orchestrator Operational Insights Collector Smart Licensing Utility (CSLU) Smart Software Manager On-Prem ThousandEyes Endpoint Agent for MacOS ThousandEyes Endpoint Agent for Windows Unified Contact Center Express (CCX) Routing and Switching - Enterprise and Service Provider Notes Application Policy Infrastructure Controller (APIC) MDS 9000 Series Multilayer Switches Releases 9.4(1) through 9.4(5a) are impacted. Code train 9.3 is not impacted. Nexus 3000 Series Switches Releases 9.3(9) through 9.3(18) are impacted. Code train 10.x impacted except for train 10.1. Nexus 9000 Series Fabric Switches in ACI mode Code trains 15.x and 16.x are impacted. Nexus 9000 Series Switches in standalone NX-OS Releases 9.3(9) through 9.3(18) impacted. Code train 10.x impacted except for train 10.1. Unified Computing Notes HyperFlex HX Data Platform UCS Director Voice and Unified Communications Devices Notes Cloud Connect Finesse Jabber for Windows Jabber Guest Unified Intelligence Center Virtualized Voice Browser (VVB) 15.0(1) code train impacted." }, { "category": "general", "title": "Products Confirmed Not Vulnerable", "text": "Cisco is investigating its product line to determine which products may be affected by this issue. This section will be updated as information becomes available.\r\n\r\nCisco has confirmed that this issue does not affect the following Cisco products:\r\n Cable Devices Intelligent Node Software (GS7000 Nodes) Collaboration and Social Media Webex Contact Center Endpoint Clients and Client Software Endpoint Diagnostic Tool Network and Content Security Devices Advanced Web Security Reporting Secure Network Analytics Host Classifier UTD Snort IPS Engine Software Network Management and Provisioning Business Dashboard Catalyst Center (formerly DNA Center) Catalyst SD-WAN Controller Catalyst SD-WAN Manager Common Services Platform Collector (CSPC) Crosswork Network Controller (Active Topology) Crosswork Network Services Orchestrator Crosswork Optimization Engine Duo Authentication Proxy Elastic Services Controller (ESC) FindIT Network Management IoT Field Network Director Network Configuration and Change Management (NCCM) Nexus Dashboard Nexus Dashboard Fabric Controller (NDFC) Nexus Dashboard Intersights Nexus Dashboard Orchestrator Optical Network Planner Prime Collaboration Assurance Prime Infrastructure (end-of-life) Prime Network Prime Network Registrar Prime Performance Manager Secure Endpoint - Cloud Secure Endpoint - Endpoint Secure Endpoint - Private Cloud Secure Endpoint Orbital ThousandEyes Recorder (Deprecated) Routing and Switching - Enterprise and Service Provider APIC OpenStack and Container Plugins Catalyst 1200 and 1300 Series Switches Connected Grid Routers IOS Software IOS XE Catalyst SD-WAN Software IOS XE IoT Routers IOS XE Public Key Infrastructure (PKI) IOx Application Hosting (Industrial Ethernet 4000 Series Switches) Nexus 7000 Series Switches ONS 15454 Series Multiservice Provisioning Platforms Unified Computing Unified Computing System Manager (UCSM) UCS / Fabric Interconnects / Group Based Policy Plugin for OpenStack with ACI UCS C-Series Rack Servers - Integrated Management Controller (IMC) and BIOS UCS Central Software UCS E-Series M3 Servers (UCS-E160S-M3) UCS Manager Software UCS Server Utilities (Host Upgrade Utility and Server Diagnostic Utility) Video, Streaming, TelePresence, and Transcoding Devices Meeting Management (CMM) Meeting Server (CMS) Video Surveillance Manager Voice and Unified Communications Devices Contact Center SIP Proxy (CCCSP) Emergency Responder Expressway Select Series Expressway Series Hosted Collaboration Mediation Fulfillment Unified Communications Manager (Unified CM) Unified Communications Manager IM & Presence Service (Unified CM IM&P) Unified Communications Manager Session Management Edition (Unified CM SME) Unity Connection Unity Express Wireless Aironet Access Points AireOS Wireless LAN Controllers Aironet 1800S Series Network Sensor Aironet Active Sensor Catalyst Access Points Industrial Wireless Monitor Mobility Services Engine Cisco Cloud Hosted Services Spaces (Cloud Service)\r\nImportant: If a product is not listed within this advisory, Cisco's review indicates that the product is not affected by this vulnerability." }, { "category": "general", "title": "Details", "text": "Impact\r\nAnyone in possession of these weak private keys can issue fraudulent TLS/HTTPS certificates for any domain on the internet. The eight compromised Issuing CAs include:\r\n\r\n6 TLS Issuing CAs: Covering Domain Validated (DV), Organization Validated (OV), and Extended Validation (EV).\r\n2 Code Signing CAs: Allowing for the signing of malicious software that appears to come from a trusted source.\r\n\r\nCritically, all eight certificates were cross-signed by Sectigo’s AAA Certificate Services root in May 2025. This cross-signature ensured that the compromised keys were trusted by almost every device, browser, and operating system globally, even if those systems did not natively trust the eMudhra roots.\r\n\r\nThis issue impacts any Cisco product that trusts these compromised eMudhra intermediate certificates, regardless of whether the trust is managed through Cisco's Trusted Root Store (TRS) bundles, embedded certificates, or other third-party trust mechanisms." }, { "category": "general", "title": "Workarounds", "text": "Any workarounds will be documented in the Vulnerable Products [\"#vp\"] section of this advisory." }, { "category": "general", "title": "Vulnerability Policy", "text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.\r\n\r\nFor additional information on Cisco's vulnerability management, disclosure cadence, and software patching strategy, see Cisco's Transition to a Risk-Based Vulnerability Disclosure Model [\"https://sec.cloudapps.cisco.com/security/center/resources/risk-based-disclosure\"]." }, { "category": "general", "title": "Exploitation and Public Announcements", "text": "The Cisco Product Security Incident Response Team (PSIRT) is aware that a public announcement is available for the issue that is described in this advisory.\r\n\r\nThe Cisco PSIRT is not aware of any malicious use of the issue that is described in this advisory." }, { "category": "general", "title": "Source", "text": "Cisco would like to thank eMudhra, who reported this issue." }, { "category": "legal_disclaimer", "title": "Legal Disclaimer", "text": "SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT\r\n\r\nThe Cisco Support and Downloads [\"https://www.cisco.com/c/en/us/support/index.html\"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid.\r\n\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories [\"https://www.cisco.com/go/psirt\"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"] or their contracted maintenance providers.\r\nLEGAL DISCLAIMER DETAILS\r\n\r\nCISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nCopies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories [\"https://www.cisco.com/go/psirt\"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"] for more information." } ], "publisher": { "category": "vendor", "contact_details": "psirt@cisco.com", "issuing_authority": "Cisco PSIRT", "name": "Cisco", "namespace": "https://wwww.cisco.com" }, "references": [ { "category": "self", "summary": "Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-emudhra-info-ScS22A1r" }, { "category": "external", "summary": "Cisco Security Vulnerability Policy", "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html" }, { "category": "external", "summary": "eMudhra Intermediate CA Compromise", "url": "https://emudhra.we-have-a-problem.com/" }, { "category": "external", "summary": "Compromised eMudhra intermediate certificates", "url": "https://blog.talosintelligence.com/compromised-intermediate-certificates/" }, { "category": "external", "summary": "Compromised eMudhra Intermediate Certificate Authorities on Splunk Products - October 2026", "url": "https://advisory.splunk.com/advisories/SVD-2026-1014" }, { "category": "external", "summary": "Cisco IOS XE and GuestShell CA Trust eMudhra Distrust Guide", "url": "https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-17/226548-cisco-ios-xe-and-guestshell-ca-trust.html" }, { "category": "external", "summary": "CSCwx51613", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwx51613" }, { "category": "external", "summary": "Cisco Secure Firewall/Firewall Management Center/Adaptive Security Appliance guidance - Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities", "url": "https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/226473-cisco-secure-firewall-firewall.html" }, { "category": "external", "summary": "CSCwx36769", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwx36769" }, { "category": "external", "summary": "CSCwx45230", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwx45230" }, { "category": "external", "summary": "Duo Access Gateway 3.2.0 Released 2026-10-21", "url": "https://community.cisco.com/t5/duo-release-notes/duo-access-gateway-3-2-0-released-2026-10-21/ta-p/5583226" }, { "category": "external", "summary": "Duo Agentic Identity for agentgateway", "url": "https://duo.com/docs/agentgateway" }, { "category": "external", "summary": "Duo Network Gateway 3.4.1 Released 2026-10-22", "url": "https://community.cisco.com/t5/duo-release-notes/duo-network-gateway-3-4-1-released-2026-10-22/ta-p/5583617" }, { "category": "external", "summary": "Identity Services Engine - Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities", "url": "https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/226478-identity-services-engine-emergency.html" }, { "category": "external", "summary": "IOS XR Guidance - Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities", "url": "https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xr-software/226490-ios-xr-guidance-emergency-distrust-of.html" }, { "category": "external", "summary": "Check and fix certificates affected by the eMudhra security update for Webex Meetings", "url": "https://help.webex.com/en-us/article/nc6po10/Check-and-fix-certificates-affected-by-the-eMudhra-security-update-for-WebexMeetings" }, { "category": "external", "summary": "Security Vulnerability Policy", "url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html" }, { "category": "external", "summary": "Cisco's Transition to a Risk-Based Vulnerability Disclosure Model", "url": "https://sec.cloudapps.cisco.com/security/center/resources/risk-based-disclosure" }, { "category": "external", "summary": "Cisco Support and Downloads", "url": "https://www.cisco.com/c/en/us/support/index.html" }, { "category": "external", "summary": "Cisco Technical Assistance Center (TAC)", "url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html" }, { "category": "external", "summary": "considering software upgrades", "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes" }, { "category": "external", "summary": "the advisories", "url": "https://www.cisco.com/go/psirt" } ], "title": "Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities", "tracking": { "current_release_date": "2026-11-06T20:40:06+00:00", "generator": { "date": "2026-11-06T20:40:08+00:00", "engine": { "name": "TVCE" } }, "id": "cisco-sa-emudhra-info-ScS22A1r", "initial_release_date": "2026-10-23T16:00:00+00:00", "revision_history": [ { "date": "2026-10-23T22:25:05+00:00", "number": "1.0.0", "summary": "Initial public release." }, { "date": "2026-10-24T20:55:18+00:00", "number": "1.1.0", "summary": "Updated products under investigation, impacted, and not impacted." }, { "date": "2026-10-26T20:34:19+00:00", "number": "1.2.0", "summary": "Updated products under investigation, impacted, and not impacted." }, { "date": "2026-10-27T18:08:01+00:00", "number": "1.3.0", "summary": "Updated products under investigation, impacted, and not impacted." }, { "date": "2026-10-28T19:39:52+00:00", "number": "1.4.0", "summary": "Updated products under investigation, vulnerable, and confirmed not vulnerable. Added link to Splunk advisory." }, { "date": "2026-10-30T21:52:08+00:00", "number": "1.5.0", "summary": "Updated products under investigation, impacted, and not impacted." }, { "date": "2026-11-04T21:44:44+00:00", "number": "1.6.0", "summary": "Updated products impacted." }, { "date": "2026-11-05T21:58:10+00:00", "number": "1.7.0", "summary": "Updated products impacted." }, { "date": "2026-11-06T20:40:06+00:00", "number": "1.8.0", "summary": "Updated products under investigation and products impacted." } ], "status": "interim", "version": "1.8.0" } } }