News
threat-intel 12 Email Encryption Solutions: The 2026 Buyer’s Verdict Guide - GBHackers cybersecurity Fake Firefox Crypto Wallet Extensions Hide Malware Inside Mozilla-Signed Add-on Packages - CyberPress cybersecurity XWorm Malware Campaign Uses Legitimate Windows RegAsm.exe Process to Hide Malicious Code - CyberPress cybersecurity Hackers Demand $50 Million From GMO Internet, Threaten Ransomware Attack on Customer Systems - CyberPress threat-intel Hackers Attempt to Breach U.S. Election Commission Systems, Triggering Major Service Outage - GBHackers cybersecurity Compromised Camera Management Software Lets Hackers Deploy Malware and Maintain Remote Access - CyberPress cybersecurity Hackers Deploy 44 AI Agents to Automate Cyberattacks Against Japanese Organizations - CyberPress cybersecurity Hackers Abuse DNS Records on Government and School Domains to Run Illegal Gambling SEO Campaigns - CyberPress cybersecurity Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach - The Hacker News cybersecurity Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users - CyberPress cybersecurity Critical GoAhead Vulnerability Lets Attackers Authenticate Using Revoked Certificates - CyberPress threat-intel Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication - GBHackers cybersecurity Microsoft Whistleblower Alleges India-Based Engineer Accessed U.S. Government Cloud Logs - CyberPress threat-intel Hackers Abuse Indian Government Domains to Push Illegal Gambling Websites Through Google Search - GBHackers cybersecurity Critical UEFI Firmware Flaw Allows Attackers to Execute Code Before Windows or Linux Boots - CyberPress
1 / 15
All news ›
Threat Intel

Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication

A critical flaw in the GoAhead embedded web server lets revoked client certificates pass authentication checks, potentially restoring access to identities administrators have blocked. Tracked as CVE-2026-115881, the vulnerability carries a CVSS score of 9.1 and affects GoAhead 3.4.5 through 6.1.0 when specific mutual TLS settings are enabled. GoAhead 6.1.1 fixes the issue. The flaw […] The post Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.