The GoAhead embedded web server had a vulnerability that allowed revoked client certificates to pass through during mutual-TLS authentication, despite having a configured revocation list.
The vulnerability or weakness
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-115881 | n/a | not scored | No | - |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
This vulnerability could lead to unauthorized access to devices, potentially compromising sensitive data and operations. Organizations may face legal and reputational risks if such incidents are exploited.
Industries affected
This affects a wide range of industries, including networking, telecommunications, and industrial control systems, given the prevalence of the GoAhead server in devices such as routers, printers, and industrial controllers.
Users affected
Users of devices running affected GoAhead firmware are at risk. They may lose control over their devices if a revoked certificate is used, leading to potential security breaches and unauthorized access.
