Summary
On 19 October 2026 it was reported that the private keys for eight intermediate certificate authorities operated by eMudhra had been compromised. Browser and operating system vendors, including Apple and Microsoft, are blocking the affected certificates.
Audinate takes the security of our products and services seriously. We are reviewing the status of every product and service against this issue to make sure we maintain our security posture.
Why this matters
A certificate authority vouches that a website or server is who it claims to be. With the compromised keys, an attacker could create a certificate that looks valid for any address. To use it, the attacker would also need to be positioned to intercept or redirect network traffic, which makes real-world exploitation harder. We are not aware of any exploitation affecting Dante products or customers.
The likelihood of an incident is low. The potential impact is not, because software that trusts a forged certificate could be tricked into talking to an impostor. We are therefore treating this situation with appropriate focus.
Our response
- Reviewed all of our products and services for exposure to this issue.
- Patched any internet-facing services and confirmed that they are not vulnerable.
- Identified the products that need updated certificate chains, and are working on timing for their release in the coming weeks. This includes Dante Controller, Dante Via, Dante Studio, and Dante Domain Manager.
Updates will be published and available via standard update mechanisms and release notes will identify any changes related to this issue. Further information regarding Dante Domain Manager is available here.
General guidance
- Keep operating systems and browsers up to date. Apple, Microsoft and the browser vendors have already released protections.
- Do not work around certificate errors by disabling certificate verification.
More information
For any questions, contact Audinate Support.