CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

Trust Bundles ยท 2026-10-25

Actions

Rate this issue

Technical Details

Regions all
CVE IDs CVE-2026-111943
Deprecation Date 2026-10-31
Migration Required Yes
Cost Impact Neutral
IaC Impact High

What This Means

For DevOps Teams

Update AWS SDKs, AMIs, and trust bundles by the specified deadlines to mitigate the eMudhra CA key recovery vulnerability (CVE-2026-111943) and ensure secure TLS connections for your applications.

For Platform Teams

Deploy updated trust bundles and SDKs across your AWS infrastructure to address the eMudhra CA key recovery vulnerability (CVE-2026-111943) and maintain secure communication channels for your services.

For Executives

Implement immediate updates and mitigations to address the eMudhra CA key recovery vulnerability (CVE-2026-111943) to ensure the security of AWS trust bundles and protect customer data integrity and confidentiality.

Source

View original AWS announcement โ†’

Weekly AWS Digest in Your Inbox

No spam, no headlines. Just a weekly summary of the 3โ€“7 AWS changes that matter for DevOps and Platform teams.

๐Ÿ“ง Exactly 1 email per week โ€ข Every Tuesday โ€ข Unsubscribe anytime

Today: AWS only. Coming next: Azure and other major clouds.