GoAhead TLS flaws can ignore CRLs, weaken encryption, or bypass chain limits
FoxIO published PoCs for three configuration-specific bugs; GoAhead 6.1.1 fixes the OpenSSL and Mbed TLS issues.
Stories per day · 30 days
3 RSS
5 stories, newest first · one card per story
Stories tagged #mtls
GoAhead CRL check skip lets revoked client certificates pass mutual TLS
CVE-2026-115881 scores 9.1 on GoAhead 3.4.5–6.1.0 with mutual TLS and a loaded CRL; 6.1.1 fixes it.
Three GoAhead TLS bugs skip CRLs, depth limits, or weaken DH
Fixes are in GoAhead 6.1.1 for the OpenSSL-compatible and mbed TLS cases; a public PoC decrypts weak DHE sessions.
attezt: device attestation, PKCS11 and ACME
attezt brings the IETF device-attest-01 ACME challenge and PKCS#11 attestation to Linux.
Kubernetes Attack Lets Hackers Steal SPIFFE Workload Identities and Impersonate Applications
Unit 42 detailed a Kubernetes technique where node-root attackers spoof cgroup selectors to steal SPIFFE/SPIRE workload identities and impersonate applications.
3