iboss incident

eMudhra Intermediate CA Compromise - Advisory

Minor Resolved View vendor source →

iboss experienced a minor incident on October 20, 2026, lasting –. The incident has been resolved; the full update timeline is below.

Started
Oct 20, 2026, 10:17 PM UTC
Resolved
Oct 20, 2026, 10:17 PM UTC
Duration
–
Detected by Pingoru
Oct 20, 2026, 10:17 PM UTC

Update timeline

  1. investigating Oct 20, 2026, 10:17 PM UTC

    On October 20, 2026, it was publicly disclosed that the private keys of eight eMudhra intermediate CA certificates were compromised. iboss is proactively updating the trust store on all Cloud-Connected Gateways and no customer action is required. Customers with Gateways that are not Cloud-Connected should update to version 10.4.1.249, available from the on-premises update store, to receive the same protection. Note: During this process, you may see that version 10.5.0.0 is available. No action is needed on your part, and core functionality outside the scope of this advisory is not changing. No impacts to user traffic are expected. For full details, affected certificates, and recommended actions, see the full advisory: https://docs.iboss.com/platform-documentation-public/zrXebEPDRlGNwiYPcCcz/notices-and-advisories/advisories/2026-advisories/emudhra-intermediate-ca-compromise-advisory