# TLS security incidents · pwn.watch

> Security incidents tagged TLS (vendor, product, platform or attack type).

Page: https://pwn.watch/t/tls · generated 2026-10-22T16:23:59.585Z

## Status (as of 2026-10-22)
- Incidents: 4 (3 live, 2 live and not fully patched, 2 patched)
- Days without a TLS security incident: 0 (2 still unpatched, so the counter stays at 0)
- Newest incident started: 2026-10-21

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/tls.json
- RSS (every update): https://pwn.watch/t/tls/feed.xml
- This file: https://pwn.watch/t/tls/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Node.js October 2026 security releases (Brotli RCE + TLS/DNS highs)](https://pwn.watch/i/nodejs-october-2026-security-releases) ([json](https://pwn.watch/i/nodejs-october-2026-security-releases.json)): high, live, patched, started 2026-10-21, CVE-2026-111497, CVE-2026-105482, CVE-2026-105483…
- [eMudhra intermediate CA private keys compromised](https://pwn.watch/i/emudhra-intermediate-ca-compromise) ([json](https://pwn.watch/i/emudhra-intermediate-ca-compromise.json)): critical, live, partial, started 2026-10-18, CVE-2026-111943, CVE-2026-91403
- [GoDaddy mass-revokes 404,607 TLS certificates over CP/CPS profile mismatch](https://pwn.watch/i/godaddy-mass-certificate-revocation-oct-2026) ([json](https://pwn.watch/i/godaddy-mass-certificate-revocation-oct-2026.json)): medium, live, partial, started 2026-10-14
- [nginx 1.31.7 / 1.30.6 security fixes (HTTP/3, TLS tickets, overflows)](https://pwn.watch/i/nginx-october-2026-advisories) ([json](https://pwn.watch/i/nginx-october-2026-advisories.json)): medium, closed, patched, started 2026-10-14, CVE-2026-15176, CVE-2026-93479, CVE-2026-95101…