CERT-In weekly summary

CERT-In updates 19-25 October 2026: eMudhra CA and LiteLLM breach

CERT-In flagged compromised eMudhra intermediate certificates, a malicious LiteLLM release, and patches for PHP, Oracle and Fortinet products.

The week in brief

What changed

3 points

01
eMudhra revoked eight intermediate CA certificates on 18 October after weak key-generation randomness, and Mozilla and Google blocked them. Domestic Indian DSCs and eSign are not affected; administrators should update browsers and operating systems and review certificate dependencies.
02
LiteLLM 1.107.0 on PyPI and its Docker images carried code that steals credentials and runs on Python start-up. Affected teams must isolate systems, reinstall a clean version and rotate every cloud, SSH, CI/CD and LLM API secret the environment could reach.
03
CERT-In asked users to patch remote code execution flaws in PHP 8.2 to 8.5 (fixed in 8.5.12, 8.4.27, 8.3.36 and 8.2.35), multiple Oracle products, and FortiOS, FortiManager and other Fortinet products. Fortinet CVE details follow on 10 November 2026.

Complied AI condensed the week's CERT-In records into the points above. Use the inline links to check each underlying update.