# Cloudflare finds forged eMudhra certificates and persistent patching gaps

_Published Friday, October 30, 2026 at 1:56 PM EDT · Security · Latest · Tier 2 — Notable_

![Cloudflare finds forged eMudhra certificates and persistent patching gaps — Primary](https://blog.cloudflare.com/_emdash/api/media/file/01M66XYMMC146K2EF0FS41ADG9.png)

Cloudflare says its monitoring found forged certificates using eMudhra's weak signing keys, including one dated less than an hour after Mozilla's public disclosure. It found no evidence that attackers used the keys to intercept Cloudflare connections. All high-priority Cloudflare systems have been patched.

The company recorded about 22,000 attempted handshakes using the weak keys; every handshake configured to verify certificates was refused. Separately, 50 million probes showed that 30-40% of embedded browsers such as Android WebView still accepted the compromised certificates. Cloudflare cautioned that its challenge-page sample was skewed toward bots and included only clients executing JavaScript.

## Sources

- [The Cloudflare Blog](https://blog.cloudflare.com/emudhra-patching/)

---
Canonical: https://techandbusiness.org/newswire/oDqeQOCOMjKe_r40RyVt-8
Published: 2026-10-30T17:56:01.308Z
Story chronology: 2026-10-30T17:38:50.531Z
Retrieved: 2026-10-30T21:03:57.679Z
Publisher: Tech & Business (techandbusiness.org)