PASS Summit West 2026, November 9-11|Register now

eMudhra compromised TLS certificates

23rd October 2026

Redgate has assessed its products and services to mitigate the impact of the weak private keys used in several TLS certificates issued by eMudhra Inc.

The private keys for these certificates have been disclosed, allowing an attacker to sign certificates for arbitrary hostnames. Where an application allows a chain of trust including these certificates, an attacker who is able to intercept network communication from that application may be able to impersonate a legitimate target endpoint.

Most Redgate products use operating system-managed trust stores, and require no customer action.

Updates have been released for the following products or containers where a bundled trust store is included:

  • Flyway Engine: 13.11.1 (bundled JRE and Docker container)
  • Flyway Desktop: 9.10.9 (bundled JRE)
  • Redgate Monitor: 14.37.1.7559 (Docker container images only)
  • SQL Data Catalog: 2.0.48 (Docker container image only)
  • SQL Compare: 16.1.14 (Docker container image only)
  • SQL Data Compare: 16.1.14 (Docker container image only)
  • Test Data Manager GUI: 0.72.91 (Docker container image only)
  • Schema Compare for Oracle: 6.3.80 (Docker container image only)
  • Data Compare for Oracle: 6.3.80 (Docker container image only)
  • pgNow: 1.0.54
  • pgCompare: 1.0.61
  • Schema Compare for MySQL: 1.0.61

No other Redgate products require updates.

Redgate has assessed the impact on its SaaS products and services, and internal business systems, and implemented mitigations as required.