Certificate Trust Vulnerability in HCL Domino Server by eMudhra
CVE-2026-108014

9.1CRITICAL

Key Information:

Vendor

HCL Softwaresoftware

Status
Domino Server
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108014?

A vulnerability has been identified wherein private keys for eight intermediate CA certificates issued by eMudhra have been compromised, jeopardizing the certificate trust of HCL Domino Server. This flaw allows unauthenticated attackers to potentially spoof server certificates, facilitating man-in-the-middle (MITM) attacks. As a result, attackers could intercept and modify content transmitted over outbound TLS connections, posing significant risks to the security and integrity of network communications.

Affected Version(s)

Domino Server <1=2.0.2 FP8, <=14.0 FP5, 14.5, ,<=14.5.1 FP1

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V4

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.