Hoxhunt's response to eMudhra's compromised intermediary CA keys (multiple CVEs)

Impact

Although Hoxhunt is affected by this global incident, the nature of the CA incident provides no reason to suspect any adverse effects. We are actively analyzing the situation and implementing the necessary remediation and mitigation measures.

Mitigation measures

On the day of disclosure, 21 October 2026, Hoxhunt assessed all related CVEs against its service inventory and confirmed that some apply to Hoxhunt. We have removed the affected CA from our trust stores and continue to work toward completing the removal.

Supply chain impact

Hoxhunt assesses its sub-processors through its third-party risk management process, and its vendor monitoring system flags reported security incidents involving these providers. We are confirming the exposure and remediation status of the sub-processors that process Hoxhunt customer data. We will provide an initial update by 28 October 2026 through this support advisory article, followed by additional updates as responses are received. 

Actions required on your side

None.

 

Updates

Will be provided as investigations continue. 

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request