socket-dev · Crawled Nov 1, 2026

eMudhra, Brotli, and the Long Tail of a Security Fix

1 CVEs

AI Summary

The article discusses two major security issues: the compromise of eMudhra intermediate CA private keys due to a flawed key-generation process, leading to weak 8-bit keys being used instead of 384-bit keys, and a memory corruption vulnerability (CVE-2026-111497) in the Brotli decompression library. The eMudhra incident allowed potential certificate forgery, with trust chains extending through roots like Sectigo’s AAA Certificate Services, while the Brotli flaw affected multiple runtimes and applications including Node.js, Bun, Python (via requests), and .NET. Despite patches being released, the widespread bundling of vulnerable libraries and certificate stores in applications means updates must be manually propagated, leaving many systems exposed.

AI-extracted · verify before operational use

Extracted Entities 1 found

CVE CVE-2026-111497 →

MITRE ATT&CK TTPs 7 techniques

T1055 Process Injection · Defense Evasion T1068 Exploitation for Privilege Escalation · Privilege Escalation T1070.004 File Deletion · Defense Evasion T1203 Exploitation for Client Execution · Execution T1210 Exploitation of Remote Services · Lateral Movement T1498 Network Denial of Service · Impact T1499 Endpoint Denial of Service · Impact