HCLSoftware Notes Client vulnerabilities

Latest HCLSoftware Notes Client CVEs

Newest publication first

1. CVE-2026-108015 eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

   Published 2026-10-27

   Critical·CVSS 9.1

   Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificate...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.