TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

Security researchers at FoxIO have uncovered three separate flaws in how the widely embedded GoAhead web server, built by EmbedThis, handles TLS connections. GoAhead powers management interfaces on hundreds of millions of networking devices, printers, industrial controllers and military systems, so the impact depends heavily on which TLS library and certificate settings each manufacturer chose.

The most severe issue, CVE-2026-115881 (CVSS 9.1), hits versions 3.4.5 through 6.1.0 when compiled against OpenSSL or similar libraries with mutual TLS and certificate revocation enabled — the server loads the revocation list but never actually enforces it, letting revoked or stolen client certificates keep authenticating silently. A second, unnamed flaw (CVSS 5.9) in Mbed TLS-based builds from 4.0.2 to 6.1.0 weakens some TLS 1.2 sessions enough for an attacker to decrypt captured traffic offline. A third bug, CVE-2026-115884 (CVSS 7.4), lets attackers bypass certificate-chain-length restrictions on LibreSSL 3.2.x and 3.3.2–3.3.6 builds up to version 6.1.0, though only on servers accepting client certs from any issuer.

EmbedThis shipped GoAhead 6.1.1 on August 2, fixing the OpenSSL and Mbed TLS problems, with full advisories released October 12; Mbed TLS users can also mitigate by disabling DHE cipher suites or switching backends, while LibreSSL users should enable issuer verification or upgrade to OpenSSL or LibreSSL 4.x. FoxIO has published proof-of-concept exploits and detection fingerprints, and its CTO flagged major vendors like Palo Alto Networks, HP, Siemens, Honeywell, Lockheed Martin and Boeing as GoAhead users, though it's unclear which specific products run vulnerable configurations — and device-level patches still depend on each manufacturer.