Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication
A critical flaw in the GoAhead embedded web server lets revoked client certificates pass authentication checks, potentially restoring access to identities administrators have blocked. Tracked as CVE-2026-115881, the vulnerability carries a CVSS score of 9.1 and affects GoAhead 3.4.5 through 6.1.0 when specific mutual TLS settings are enabled. GoAhead 6.1.1 fixes the issue. The flaw […] The post Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
Continue on GBHackers ↗ ‹ All news Get the newsletter
The summary and image come from GBHackers; the image is shown from their website.