Mbed TLS

Reported Context (4)

Another flaw affects GoAhead builds using Mbed TLS. GoAhead TLS Flaw Lets Revoked Client Certificates Authenticate
from the second bug (CVSS score of 5.9, no CVE), found in GoAhead 4.0.2 through 6.1.0 builds that use Mbed TLS. A coding error weakens the encryption of some TLS 1.2 connections enough that recorded sessions can be Three TLS Flaws in GoAhead Web Server Put Some Device Configurations at Risk
must hold a certificate signed by a trusted authority and listed as revoked. Builds that use the Mbed TLS backend are unaffected; that backend checks revocation via a separate code path. GoAhead 6.1.1 Fixes TLS Flaws and Login Bypass in Embedded Web Server
mbedtls carries seven, including a client impersonation issue, CVE-2026-34873, and a signature algorithm injection issue, CVE-2026-25834. Debian 13.7 Bundles 92 Security Advisories and Updates 106 Packages

CVE (22)

People (2)

MITRE ATT&CK (1)

Vendors (1)

Products (20)

Tools (1)

Industries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.