An intermediate certificate authority has been compromised, resulting in the assignment of CVE-2026-111943 by the National Vulnerability Database. The breach enables attackers to issue valid SSL/TLS certificates for arbitrary domains, bypassing browser trust warnings and certificate pinning on systems that do not revoke the affected CA.

This type of vulnerability represents a foundational threat to public key infrastructure. Any application or service validating certificates through the compromised chain becomes vulnerable to transparent interception and credential theft. Organizations must identify systems relying on the affected CA, implement certificate revocation list (CRL) updates, and consider preloading distrust flags in browsers and applications.

The scope and remediation timeline have not been publicly detailed in available summaries, but operators of TLS-terminating infrastructure should prioritize auditing their certificate chains and consulting CA communication channels for guidance.