Press release · Cloudflare

4 real? Tracking exploitation and patching of eMudhra’s weak keys

October 30, 2026 · Originally published by Cloudflare on blog.cloudflare.com

Four, just four: that’s the key to break into any unpatched connection on the Internet that is using eMudhra certificates. Here’s how we quickly patched Cloudflare, what evidence we can see of attempted exploitation, and how much of the rest of the Internet remains exposed.