GoAhead 6.1.1 fixes three TLS flaws in embedded web servers
A critical OpenSSL-backend bug can accept revoked client certificates; the other flaws weaken DHE or chain checks.
74
Vulnerability1 · 1 read
CVE-2026-115884
- CVSS
- —
- EPSS
- —
- Published
- —
- Modified
- —
In the news
3 storiesGoAhead TLS flaws accept revoked certificates and weaken sessions
GoAhead 6.1.1 fixes three TLS issues; FoxIO published proof-of-concept code, with no attacks reported.
72
GoAhead TLS flaws can ignore CRLs, weaken encryption, or bypass chain limits
FoxIO published PoCs for three configuration-specific bugs; GoAhead 6.1.1 fixes the OpenSSL and Mbed TLS issues.
71