eMudhra Certificate Authority Security Issue

Summary

eMudhra Certificate Authority Security Issue

We will be performing a security update across our infrastructure to explicitly distrust the compromised eMudhra intermediate Certificate Authorities (CAs). During this maintenance, our engineering team will update the local trust stores to align with upstream security advisories. No downtime or reboots are required. Core services and applications will remain online throughout the maintenance. Following this update, outgoing secure connections (HTTPS/TLS) to any external service or endpoint relying on the revoked eMudhra intermediate certificates will be rejected automatically. If your integration relies on certificates issued by the affected eMudhra intermediates, ensure your certificates have been reissued under an unaffected, trusted Certificate Authority to prevent connection failures.

• Started

  Oct 27, 2026 · 11:40 AM

• Status

  Identified

• Duration

  Ongoing

• Severity

  None

• ◐

  Investigating

  Oct 27 · 11:40 AM Liquid Web

  We are aware of a recently reported security issue involving compromised eMudhra Certificate Authority (CA) certificates that may be present in certificate trust stores across some environments. At this time, we have not identified any service interruptions or confirmed customer impact related to this issue. Our Security and Engineering teams are actively evaluating the situation and working to determine and implement the appropriate mitigation across affected environments. Additional information regarding this issue is available from Sansec: https://sansec.io/guides/compromised-certificate-authority We will provide additional updates as more information becomes available and as our remediation efforts progress. If you have any questions or concerns, please don't hesitate to contact us via live chat or by opening a support case.

• ◆

  Identified

  Oct 28 · 6:05 PM Liquid Web

  We will be performing a security update across our infrastructure to explicitly distrust the compromised eMudhra intermediate Certificate Authorities (CAs). During this maintenance, our engineering team will update the local trust stores to align with upstream security advisories. No downtime or reboots are required. Core services and applications will remain online throughout the maintenance. Following this update, outgoing secure connections (HTTPS/TLS) to any external service or endpoint relying on the revoked eMudhra intermediate certificates will be rejected automatically. If your integration relies on certificates issued by the affected eMudhra intermediates, ensure your certificates have been reissued under an unaffected, trusted Certificate Authority to prevent connection failures.