Compromised Intermediate eMudhra Certificates in Mozilla Firefox
CVE-2026-113470

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 20 October 2026

What is CVE-2026-113470?

Mozilla addressed a vulnerability involving compromised intermediate eMudhra certificates by implementing blocks through the OneCRL list. This action, taken on October 17th, ensures that clients will effectively reject these certificates even when RemoteSettings is disabled or not usable in certain environments. Affected users should update to the latest versions of Firefox and Firefox ESR to mitigate potential security risks.

Affected Version(s)

Firefox 115.43.1

Firefox 153.5.1

Firefox 158.0.1

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2083382

https://www.mozilla.org/security/advisories/mfsa2026-111/

https://www.mozilla.org/security/advisories/mfsa2026-112/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 20, 2026
Vulnerability Reserved
Oct 20, 2026

Credit

Wayne

CVE-2026-113470 Data

JSON