Summary
In October 2026, a security researcher reported that eight eMudhra intermediate certificates had weak or compromised keys (details in the Cloudflare article). These certificates were revoked. This article explains what it means for Quividi products and what we recommend.
Impact on Quividi
- VidiCenter: not impacted.
- VidiReports: versions before 7.9.7.2 still trust the revoked certificates.
- To exploit this, an attacker would need to intercept the network traffic between the VidiReports machine and VidiCenter. Even then, the data uploaded by VidiReports is encrypted by the application itself, so intercepted data would remain unusable to them. For this reason we consider the risk low.
- VidiReports for BrightSign is not impacted
- VidiReports 7.9.7.2 and later: the revoked certificates are no longer trusted.
What we recommend
Upgrade all your VidiReports instances to version 7.9.7.2 or later.
How to upgrade
- In VidiCenter, open the upgrade configuration page.
- Select version 7.9.7.2 (or the latest available).
- Apply it to the locations you want to upgrade.
- The VidiReports instances will pick up the upgrade the next time they contact VidiCenter.
No action is needed on the VidiCenter side.
If you need additional support to plan the upgrade, or a list of the locations still running an earlier version, contact Quividi support at help@quividi.com.