Hundreds of Millions of Devices at Risk: GoAhead TLS Flaws Let Revoked Certificates Pass and Sessions Be Decrypted
In October 2026, security researcher Sébastien Féry of FoxIO disclosed three TLS vulnerabilities in the GoAhead embedded web server, which runs in hundreds of millions of routers, printers, industrial controllers, and gateways from vendors including HP, Siemens, Rockwell, Canon, and D-Link. The most critical flaw, CVE-2026-115881 (rated 9.1), allows a revoked client certificate to complete mutual-TLS authentication because GoAhead's OpenSSL backend loads a certificate revocation list at startup but never enforces it. A second flaw permits over-length certificate chains to bypass authentication on LibreSSL legacy builds, and a third causes a 1-byte Diffie-Hellman value to be transmitted over Mbed TLS, enabling passive session decryption. Fix version 6.1.1 was released August 2, 2026, but device owners depend entirely on individual manufacturers to ship firmware updates. These flaws expose a systemic firmware supply-chain risk: the attack surface is determined at compile time, invisible to device owners, and remediation velocity is controlled by OEM manufacturers rather than the software vendor. As embedded systems increasingly anchor industrial and enterprise network edges, unpatched TLS flaws in shared components like GoAhead represent a durable, low-noise pathway for credential bypass and traffic interception that persists until each OEM ships and deploys a firmware update.
Kill Chain
