diff --git a/CHANGELOG.md b/CHANGELOG.md
index afdebcb..8187eff 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,11 @@
  how a consumer would use the library or CLI tool (e.g. adding unit tests, updating documentation, etc) are not captured
  here.
 
+## 2.12.6 - 2026-10-23
+
+### Security
+- Require `certifi` 2026.10.19 or newer so TLS verification rejects compromised eMudhra intermediate CAs (CVE-2026-111943)
+
 ## 2.12.5 - 2026-09-30
 - Fixed an issue where listing trusted activities in some cases would not return the entire list.
 
diff --git a/pyproject.toml b/pyproject.toml
index 1317e4b..230e6cd 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -25,6 +25,7 @@ classifiers = [
 ]
 dependencies = [
   "boltons",
+  "certifi>=2026.10.19",
   "requests",
   "requests-toolbelt",
   "rich",
diff --git a/src/_incydr_sdk/__version__.py b/src/_incydr_sdk/__version__.py
index 8036a35..e3e7028 100644
--- a/src/_incydr_sdk/__version__.py
+++ b/src/_incydr_sdk/__version__.py
@@ -1,4 +1,4 @@
 # SPDX-FileCopyrightText: 2022-present Code42 Software <integrations@code42.com>
 #
 # SPDX-License-Identifier: MIT
-__version__ = "2.12.5"
+__version__ = "2.12.6"