# CVE-2026-108014: eMudhra intermediate CA private keys compromised

Source: https://junglewise.ai/threats/cve-2026-108014-private-keys-for-eight-emudhra-intermediate-ca-certificates-have  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-27. Updated: 2026-10-27  
License: CC BY 4.0 with a link back

CVE-2026-108014 · Severity: info · Published 2026-10-27

Eight eMudhra intermediate Certificate Authority private keys have been compromised, affecting the trust chain for HCL Domino Server's outbound TLS connections. An attacker with access to these compromised keys can impersonate legitimate servers and intercept or modify data in transit, potentially leading to credential theft, data exfiltration, or injection of malicious content into encrypted communications.

Vendors: [HCL](https://junglewise.ai/threats/vendors/hcl).

## Quick answers

**Is CVE-2026-108014 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-108014 being exploited in the wild.

**How severe is CVE-2026-108014?** Informational severity, published 27 October 2026.

**Which products and versions are affected?** HCL Domino Server.

**Is there a fix for CVE-2026-108014?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-108014 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-108014?** Check whether you run HCL Domino Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Compromised eMudhra intermediate CA private keys enable cryptographic impersonation of servers during TLS handshakes. HCL Domino Server uses these certificates for outbound network requests; an unauthenticated network attacker can perform man-in-the-middle attacks against any Domino Server instance, intercepting and modifying encrypted communications. Remediation requires revocation of the compromised certificates and installation of updated CA certificate bundles.

## Affected products

- HCL Domino Server

## Timeline

- 2026-10-27: disclosed

## References

- [https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134742](https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134742)