LibreSSL

Reported Context (3)

A separate issue tracked as CVE-2026-115884 affects older LibreSSL verifier behavior and can allow an over-depth certificate chain to bypass GoAhead’s chain-depth restriction under a specific configuration where client GoAhead TLS Flaw Lets Revoked Client Certificates Authenticate
The chain-length bypass, CVE-2026-115884 (CVSS score of 7.4), affects GoAhead up to version 6.1.0 built with LibreSSL 3.2.x or 3.3.2 through 3.3.6. Three TLS Flaws in GoAhead Web Server Put Some Device Configurations at Risk
The LibreSSL problem allows an attacker to present a certificate chain longer than GoAhead's 10-certificate limit and still complete the handshake as an authenticated client, without any trusted key. GoAhead 6.1.1 Fixes TLS Flaws and Login Bypass in Embedded Web Server

CVE (2)

People (2)

MITRE ATT&CK (1)

Vendors (1)

Products (3)

Tools (1)

Industries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.