Transform retail operations with Zebra’s retail technology solutions, featuring hardware and software for improving inventory management and empowering teams.
Streamline operations with Zebra’s healthcare technology solutions, featuring hardware and software to improve staff collaboration and optimise workflows.
Enhance processes with Zebra’s manufacturing technology solutions, featuring hardware and software for automation, data analysis, and factory connectivity.
Zebra’s transportation and logistics technology solutions feature hardware and software for enhancing route planning, visibility, and automating processes.
Zebra's hospitality technology solutions equip your hotel and restaurant staff to deliver superior customer and guest service through inventory tracking and more.
Zebra's market-leading solutions and products improve customer satisfaction with a lower cost per interaction by keeping service representatives connected with colleagues, customers, management and the tools they use to satisfy customers across the supply chain.
Empower your field workers with purpose-driven mobile technology solutions to help them capture and share critical data in any environment.
Zebra's range of mobile computers equip your workforce with the devices they need from handhelds and tablets to wearables and vehicle-mounted computers.
Zebra's desktop, mobile, industrial, and portable printers for barcode labels, receipts, RFID tags and cards give you smarter ways to track and manage assets.
Zebra's 1D and 2D corded and cordless barcode scanners anticipate any scanning challenge in a variety of environments, whether retail, healthcare, T&L or manufacturing.
Zebra's extensive range of RAIN RFID readers, antennas, and printers give you consistent and accurate tracking.
Choose Zebra's reliable barcode, RFID and card supplies carefully selected to ensure high performance, print quality, durability and readability.
Zebra's rugged tablets and 2-in-1 laptops are thin and lightweight, yet rugged to work wherever you do on familiar and easy-to-use Windows or Android OS.
With Zebra's family of fixed industrial scanners and machine vision technologies, you can tailor your solutions to your environment and applications.
Zebra’s line of kiosks can meet any self-service or digital signage need, from checking prices and stock on an in-aisle store kiosk to fully-featured kiosks that can be deployed on the wall, counter, desktop or floor in a retail store, hotel, airport check-in gate, physician’s office, local government office and more.
Discover Zebra’s range of accessories from chargers, communication cables to cases to help you customise your mobile device for optimal efficiency.
Zebra's environmental sensors monitor temperature-sensitive products, offering data insights on environmental conditions across industry applications.
Zebra's location technologies provide real-time tracking for your organisation to better manage and optimise your critical assets and create more efficient workflows.
Enhance frontline operations with Zebra’s AI software solutions, which optimize workflows, streamline processes, and simplify tasks for improved business outcomes.
Empower your frontline with Zebra Companion AI, offering instant, tailored insights and support to streamline operations and enhance productivity.
Boost productivity with Zebra Frontline AI Enablers: AI vision models, sample apps, and APIs streamline workflows for efficient business processes.
Zebra Frontline AI Blueprints deliver adaptable, real-world AI frameworks that automate manual tasks and drive efficiency in high-pressure frontline operations.
Zebra Workcloud, enterprise software solutions boost efficiency, cut costs, improve inventory management, simplify communication and optimize resources.
Keep labour costs low, your talent happy and your organisation compliant. Create an agile operation that can navigate unexpected schedule changes and customer demand to drive sales, satisfy customers and improve your bottom line.
Drive successful enterprise collaboration with prioritized task notifications and improved communication capabilities for easier team collaboration.
Get full visibility of your inventory and automatically pinpoint leaks across all channels.
Reduce uncertainty when you anticipate market volatility. Predict, plan and stay agile to align inventory with shifting demand.
Drive down costs while driving up employee, security, and network performance with software designed to enhance Zebra's wireless infrastructure and mobile solutions.
Explore Zebra’s printer software to integrate, manage and monitor printers easily, maximising IT resources and minimising down time.
Make the most of every stage of your scanning journey from deployment to optimisation. Zebra's barcode scanner software lets you keep devices current and adapt them to your business needs for a stronger ROI across the full lifecycle.
RFID development, demonstration and production software and utilities help you build and manage your RFID deployments more efficiently.
RFID development, demonstration and production software and utilities help you build and manage your RFID deployments more efficiently.
Zebra DNA is the industry’s broadest suite of enterprise software that delivers an ideal experience for all during the entire lifetime of every Zebra device.
Advance your digital transformation and execute your strategic plans with the help of the right location and tracking technology.
The Zebra Aurora suite of machine vision software enables users to solve their track-and-trace, vision inspection and industrial automation needs.
Zebra Aurora Focus brings a new level of simplicity to controlling enterprise-wide manufacturing and logistics automation solutions. With this powerful interface, it’s easy to set up, deploy and run Zebra’s Fixed Industrial Scanners and Machine Vision Smart Cameras, eliminating the need for different tools and reducing training and deployment time.
Aurora Imaging Library™, formerly Matrox Imaging Library, machine-vision software development kit (SDK) has a deep collection of tools for image capture, processing, analysis, annotation, display, and archiving. Code-level customisation starts here.
Aurora Design Assistant™, formerly Matrox Design Assistant, integrated development environment (IDE) is a flowchart-based platform for building machine vision applications, with templates to speed up development and bring solutions online quicker.
Designed for experienced programmers proficient in vision applications, Aurora Vision Library provides the same sophisticated functionality as our Aurora Vision Studio software but presented in programming language.
Aurora Vision Studio, an image processing software for machine & computer vision engineers, allows quick creation, integration & monitoring of powerful OEM vision applications.
Adding innovative tech is critical to your success, but it can be complex and disruptive. Professional Services help you accelerate adoption, and maximise productivity without affecting your workflows, business processes and finances.
Zebra's Managed Service delivers worry-free device management to ensure ultimate uptime for your Zebra Mobile Computers and Printers via dedicated experts.
Find ways you can contact Zebra Technologies’ Support, including Email and Chat, ask a technical question or initiate a Repair Request.
Zebra's Circular Economy Program helps you manage today’s challenges and plan for tomorrow with smart solutions that are good for your budget and the environment.
Important Update: Effective July 1, 2026, Zebra is implementing mandatory Multi-Factor Authentication (MFA) to enhance security. Learn more.
Compromise of eMudhra Intermediate Certificate Authorities
Executive Summary
Zebra Technologies is actively monitoring and addressing an industry-wide cryptographic vulnerability involving eMudhra Technologies Limited, a commercial Certificate Authority (CA).
On October 17, 2026, security researchers disclosed that private keys associated with eight intermediate CA certificates operated by eMudhra were generated with critical cryptographic defects (extremely weak entropy of only 3 to 8 bits), allowing third parties to immediately deduce the private signing keys. The potential impact is strictly isolated to Zebra's enterprise Android and Windows product lines, both of which have already been protected through automated background updates from Google and Microsoft. No other Zebra products are affected, and no manual remediation is required for standard, internet-connected deployments.
- The Issue: A critical cryptographic flaw was disclosed involving eight eMudhra intermediate Certificate Authorities, potentially allowing attackers to spoof secure websites or forge trusted signatures.
- The Impact: Impact is limited to Zebra enterprise Android and Windows devices; all other Zebra products and solutions are unaffected. This vulnerability originated strictly within eMudhra’s external key generation process. Zebra infrastructure, cloud platforms, and internal systems are completely secure and uncompromised.
- The Resolution for Android: No customer action is required for standard devices. Affected Android devices are already automatically protected via browser-level revocation updates and an emergency Google Play Services system patch deployed on October 19, 2026. For the vast majority of Zebra enterprise Android mobile computers, protection has already been delivered silently and automatically via background component updates provided by Google Play Services and modern web browsers. No firmware flashing or operating system updates are required.
- The Resolution for Windows: No customer action is required. On October 20, 2026, Microsoft published an update to the Windows Disallowed Certificate Trust List to block the affected intermediate certificate authorities. Microsoft also deployed a separate CRLSet update for Microsoft Edge and WebView2 to block the affected TLS certificates. The Edge and WebView2 update is delivered automatically through the component update mechanism and does not require customers to install a new browser version.
- For detailed information on Windows products, refer to the Microsoft Response to Compromised eMudhra Certificate Authority Keys Blog.
Additional Details: Android Remediation
For Zebra enterprise Android devices, remediation depends on the software application stack in use:
- Browsers (Google Chrome and Mozilla Firefox): Automatically protected via background browser revocation list updates (CRLSets/OneCRL) and strict Certificate Transparency (CT) enforcement. Google Chrome and Mozilla Firefox have revoked trust for the affected public key hashes via out-of-band updates.
- Native Apps and WebView (including Enterprise Browser): Automatically protected via an emergency component update pushed by Google Play Services on October 19, 2026, which added the eMudhra certificates to the Revocation List (blocklist) of Android’s system trust store.
For further technical background, refer to the Google Security Blog: Protecting Chrome and Android Users from Compromised eMudhra Intermediate CA Certificates.
Detailed Impact Analysis by Architecture on Android
1. Android Web Browsers (Google Chrome and Mozilla Firefox)
Chrome and Firefox manage their own independent root stores and do not rely on the underlying Android OS trust store. For browser-based applications, the protection is enforced directly within the browser application itself.
Because Chrome manages its own independent trust store, manually removing or disabling the certificates from the Android OS Trust Store will not impact Chrome's behavior. Chrome has pushed updates that block the compromised eMudhra certificates by adding them to its internal revocation list (CRLSet), which applies silently and instantly upon internet connection.
Additionally, Chrome natively enforces Certificate Transparency (CT). Because no legitimate certificates were ever logged for these compromised keys before the revocation, any attempt by an attacker to present a forged certificate will be rejected instantly by Chrome due to the lack of valid Signed Certificate Timestamps (SCTs).
2. Android Native Applications using WebView
An Android system-level update is necessary for applications that access web endpoints directly rather than via a standalone browser. The most common implementation is through the WebView control API, which is utilized by Zebra Enterprise Browser.
For these native applications, Google has delivered an automatic update through Google Play Services that appends the eight compromised eMudhra intermediate public key hashes to Android's secure blocklist.
On Google Mobile Services (GMS) enabled devices, this update requires no administrative intervention or OS-level firmware updates. During technical validation on Zebra Android devices, the secure blocklist entries arrived in just over one second after a factory-reset device was connected to the internet. This background delivery requires Google Play Services to be enabled on the device.
Manual Mitigation for Devices without Active Play Services
Devices operating without Google Mobile Services (non-GMS) or in restricted networks cannot receive the automated Google update. If these units run WebView-based enterprise applications, administrators must apply manual mitigation steps. Zebra is currently evaluating technical remediation paths and long-term delivery options for non-GMS platforms. In the interim, administrators should focus on network and application-level controls.
Network-Level Compensating Control: For enterprises managing large fleets where manual configuration is not immediately practical, it is highly recommended to implement an inspection rule on local corporate firewalls or secure web gateways (such as Zscaler, Palo Alto Networks, Fortinet, etc.). The rule should block any inbound or outbound connections presenting certificates signed by the compromised eMudhra intermediate keys, serving as an immediate network barrier while local device configurations are updated.
Manual Certificate Disabling Procedure
- Navigate to Settings > Security (or Security Privacy > More Security Settings).
- Select Encryption credentials > Trusted credentials.
- Under the System tab, locate and toggle Disable on the following two root certificates (disabling these covers both the direct chains and the Sectigo cross-signed variants):
- emSign ECC Root CA - G3 (Listed under eMudhra Technologies Limited)
- AAA Certificate Services (Listed under Comodo CA Limited)
Note: Disabling these roots secures Android system TLS and WebView applications, but standalone browsers like Chrome will continue to rely on their own automatic internal updates.
Verification and Testing Endpoints
Security administrators can validate local device and network-level security behaviors by navigating to the independent test endpoints established for this incident:
- Primary Compromised Intermediate Test: https://dv-g3b-emudhra.we-have-a-problem.com/
- General Incident Reference and Test Suite: https://emudhra.we-have-a-problem.com/
Other Zebra and Elo Products
Zebra industrial and desktop printers, fixed RFID readers, machine vision systems, and barcode scanners do not utilize or trust the affected eMudhra certificate chains and are completely unaffected.
Similarly, Elo cloud services (including EloView, Elo Radar, and Elo Remote) do not use eMudhra-issued certificates. Elo is proactively updating its server-side trust stores to distrust the affected root certificates. Elo Android and Windows hardware products are fully aligned with the operating system and browser guidance detailed above.
Contact and Support
For further technical assistance, hardware verification, or enterprise deployment inquiries:
- Zebra Technical Support: https://support.zebra.com/
- Zebra Product Security: ProductSecurity@zebra.com
Disclaimer: Zebra makes every attempt to release security updates on or about the time that Google releases its respective security bulletin. However, delivery time of security updates may vary depending on the region, product model, and third party software suppliers. Under some circumstances, the OS must be updated to the latest maintenance release prior to installing the security updates. Individual product updates will provide specific guidance.
Unless otherwise noted, there have been no reports of active customer exploitation or abuse from these newly reported issues.
Are you aware of a potential security issue with a Zebra Technologies product?
LifeGuard for Android
Compliance
Legal Terms of Use Privacy Policy Your Privacy Choices Supply Chain Transparency
The Zebra wordmark and logo are trademarks of Zebra Technologies Corp., registered in many jurisdictions worldwide. All other trademarks are the property of their respective owners. Some content or images may have been created with the assistance of AI. ©2026 Zebra Technologies Corp. and/or its affiliates.