TECHNOLOGY · VERIFIED DEVELOPMENT
Eight eMudhra certificates compromised, Cloudflare takes action
WHY IT MATTERS
This incident highlights the importance of secure certificate management and the need for timely updates to prevent impersonation and interception of traffic. Cloudflare's response demonstrates their commitment to protecting customers and the broader internet community.
What happened
Cloudflare has become aware of a serious security incident involving eight eMudhra intermediate certificates. The private keys associated with these certificates were compromised, allowing an attacker to create forged certificates for any domain.
Cloudflare has prioritized patching critical services and released updates for Cloudflare One Clients, Cloudflare Tunnel, and mitigations across their CDN, Developer, and Zero Trust products.
Customers are advised to take action on software or trust configurations, especially on their origin servers.
PRIMARY SOURCES
8 eMudhra certificates are compromised. Here's what you need to know
Cloudflare (company statement) · Christopher Patton · Corporate primary source; facts only, no copied text or images; link and attribution required
CORRECTIONS & UPDATES
- Revision 1 · Initial ingestion · Oct 21, 2026, 1:45 AM
- Revision 2 · Source update detected · Oct 21, 2026, 1:45 AM