Critical GoAhead Vulnerability Lets Attackers Authenticate Using Revoked Certificates
A critical vulnerability in GoAhead’s OpenSSL integration lets attackers with revoked client credentials complete mutual TLS authentication and retain access tied to those identities. Tracked as CVE-2026-115881 and GOAHEAD-SA-2026-0006, the flaw carries a CVSS score of 9.1 and affects GoAhead versions 3.4.5 through 6.1.0. Version 6.1.1 fixes the issue. Researcher Sébastien Féry reported the vulnerability, […] The post Critical GoAhead Vulnerability Lets Attackers Authenticate Using Revoked Certificates appeared first on Cyber Security News .
Continue on CyberPress ↗ ‹ All news Get the newsletter
The summary and image come from CyberPress; the image is shown from their website.