Threats tagged 'brew-biber-cve-2026-113812'

Mozilla::CA versions before 20261020 for Perl include a CA certificate bundle with a root certificate linked to compromised intermediate certificates. This bundle contains the "emSign ECC Root CA - G3" root, which enables trust paths to intermediates whose private keys are publicly known. An attacker who can intercept or redirect client traffic could use these keys to impersonate TLS servers. Perl clients using IO::Socket::SSL may fall back to this bundle if system CA stores are not used. Users should verify their CA store configuration and apply updates from their OS vendor if relying on the system store.