Vulnerability in Hclsoftware Notes Client
CVE-2026-108015
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Vulnerability class: POODLE (CVE-2014-3566)
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Hclsoftware Notes Client — versions <1=2.0.2 FP8, <=14.0 FP5, 14.5, ,<=14.5.1 FP1