Trendmast

Technology news, aggregated

ad slot · header banner 728×90
Cyber Security

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

Image: The Hacker News

ad slot · in-content video 16:9

Coverage

More coverage

  • The Hacker News · October 27, 2026 13:59
    The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server…