What happened?

An entry in NIST's National Vulnerability Database (NVD) under CVE-2026-111943 concerns a compromised intermediate certificate authority. The record rose to the front page of Hacker News.

What is an intermediate CA?

TLS certificates are validated through a chain of trust that leads back to a root certificate authority. Intermediate CAs sit in the middle of that chain and sign certificates on behalf of the root. If one is compromised, an attacker may be able to issue fake certificates that appear trusted.

Why it matters

A weakness in the chain of trust can affect connections that browsers and servers treat as secure. However, because the source text consists only of a title, the affected provider, scope and remediation status are not yet known.

What we know so far

  • The record is listed in the NVD as CVE-2026-111943.
  • The issue points to a compromised intermediate certificate authority.
  • Affected systems and patch status are not included in the public source.