CVE-2026-115884

CVE Enrichment

CISA KEV: Not listed

Last enrichment sync: 29-Oct-2026 02:52
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (2)

A separate issue tracked as CVE-2026-115884 affects older LibreSSL verifier behavior and can allow an over-depth certificate chain to bypass GoAhead’s chain-depth restriction under a specific configuration where client GoAhead TLS Flaw Lets Revoked Client Certificates Authenticate
The chain-length bypass, CVE-2026-115884 (CVSS score of 7.4), affects GoAhead up to version 6.1.0 built with LibreSSL 3.2.x or 3.3.2 through 3.3.6. Three TLS Flaws in GoAhead Web Server Put Some Device Configurations at Risk

CVE (1)

People (2)

MITRE ATT&CK (1)

Vendors (1)

Products (4)

Tools (1)

Industries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.