We've released version 12.1.1 to update the Java runtime bundled with the CrashPlan app in response to the eMudhra intermediate certificate authority issue (CVE-2026-91403).
Date of release: October 29, 2026
Security updates
- The CrashPlan app no longer trusts the eMudhra intermediate certificate authority, or the root certificates that cross-signed it (emSign Root TLS CA - G3 and Comodo AAA Certificate Services).
- Updated the Java runtime bundled with the CrashPlan app. 25.0.5+8
Release rollout schedule
Endpoints will receive expedited client upgrades over the course of the next 3 days from the release date. Delayed client upgrade exceptions still apply, and administrators can delay this upgrade for up to 60 days by configuring a global delay or organization exception. For more details, see Supported app versions and automatic upgrades.