GoAhead

Search everything

Mentions · 7d5
Mentions · 30d5
All mentions5
First seenOct 27, 2026
Last mentioned2d ago

Timeline

5 articles · newest first

GoAhead TLS flaws can ignore CRLs, weaken encryption, or bypass chain limits

FoxIO published PoCs for three configuration-specific bugs; GoAhead 6.1.1 fixes the OpenSSL and Mbed TLS issues.

SecurityWeekOct 28, 13:10 UTC · 2d agoVulnerability 6 sourcesCVE-2026-115881 CVE-2026-1158843

GoAhead CRL check skip lets revoked client certificates pass mutual TLS

CVE-2026-115881 scores 9.1 on GoAhead 3.4.5–6.1.0 with mutual TLS and a loaded CRL; 6.1.1 fixes it.

GBHackersupdated Oct 28, 13:10 UTC · 2d agofirst Oct 28, 06:51 UTC · 2d agoVulnerability 6 sourcesCVE-2026-1158811

GoAhead before 6.1.1 has three TLS bugs in crypto backends

A foxio.io write-up covers flaws in GoAhead's OpenSSL, LibreSSL, and Mbed TLS code; the note omits the details.

oss-securityupdated Oct 28, 13:10 UTC · 2d agofirst Oct 28, 00:19 UTC · 3d agoVulnerability 6 sources

Three GoAhead TLS bugs skip CRLs, depth limits, or weaken DH

Fixes are in GoAhead 6.1.1 for the OpenSSL-compatible and mbed TLS cases; a public PoC decrypts weak DHE sessions.

Hacker News · AIupdated Oct 28, 13:10 UTC · 2d agofirst Oct 27, 18:33 UTC · 3d agoVulnerability 6 sources HN 42 points · 5 comments

GoAhead TLS flaws accept revoked certificates and weaken sessions

GoAhead 6.1.1 fixes three TLS issues; FoxIO published proof-of-concept code, with no attacks reported.

The Hacker Newsupdated Oct 28, 13:10 UTC · 2d agofirst Oct 27, 13:59 UTC · 3d agoVulnerability 6 sourcesCVE-2026-115881 CVE-2026-115884

Related CVEs

by mentions

CVE-2026-115881—
published —
CVE-2026-115884—
published —

Appears with

Embedthisvendor · 4
LibreSSLproduct · 4
OpenSSLproduct · 4
Mbed TLSproduct · 4
FoxIOorganization · 3

Entities are extracted by the model from each article. First seen Oct 27, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.