-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0280
============================================================

Advisory-ID:  0xCERT-2026-0280
Severity:     Medium
Published:    2026-10-27T04:57:06.000Z
Updated:      2026-10-27T05:07:18.356Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0280

Title: Teku 26.10.3: security release for Ethereum node operators

Summary
- -------
Teku 26.10.3 (released 2026-10-27) includes security fixes according to its release notes. Ethereum node operators running Teku should review and upgrade.

Details
- -------
Summary
Teku 26.10.3 (released 2026-10-27) includes security fixes according to its release notes. Ethereum node operators running Teku should review and upgrade.

Affected
- - Teku (Consensys/teku) versions before 26.10.3

From the release notes
This is a recommended update addressing the recent CVE-2026-111943 (eMudhra compromised keys)
For more information, read our security advisory.
## Additions and Improvements
- - Docker images no longer trust the emSign ECC Root CA - G3, emSign Root CA - G1, emSign Root CA - G2 or AAA Certificate Services roots, which OpenJDK removed after the eMudhra intermediate certificate authorities were compromised in October 2026. The Eclipse Temurin base images do not include this fix yet.

Recommended actions
- - Upgrade Teku to 26.10.3 or later
- - Check the release notes for any coordinated upgrade deadline or required configuration change

Source & attribution
This 0xCERT advisory relays the Teku 26.10.3 release notes: https://github.com/Consensys-Incorporated/teku/releases/tag/26.10.3. Refer to the upstream project for the authoritative record and any follow-up security advisories.

References
- ----------
- - https://github.com/Consensys-Incorporated/teku/releases/tag/26.10.3
- - CVE-2026-111943

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrgahoJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmfh8C9bv5YDkqOBt8NTM2j6KC0JfD261EWWcUrG
/H+UoxYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAADhYwD+PhfQhEzRXpoBph/l
oMmkMPROTb/lrlQmqxkdxoHOZ/0A/A2gsSCGVNs7grYb6QVnpwghDtY8ScCg
KpQy0PaxchUB
=AyyI
-----END PGP SIGNATURE-----