Ethereum clients running 26.10.3 and Fury 26.10.2 drop four certificate roots from Docker images after a certificate authority compromise in eMudhra. Binary installations need to check the Java runtime separately. Running does not report exploitation.