Recent discoveries by cybersecurity firm FoxIO have revealed three significant vulnerabilities in the GoAhead web server’s handling of TLS. These weaknesses could lead to unauthorized continuation of revoked client certificates, allow eavesdroppers to decrypt communications, and enable attackers to bypass certificate chain length limitations.
GoAhead’s Extensive Deployment
GoAhead, developed by EmbedThis, is a lightweight web server integrated into the management interfaces of various devices, including networking equipment, printers, and industrial systems. FoxIO reports that this software is embedded in hundreds of millions of devices across sectors such as IoT, OT, firewall, and military. Sébastien Féry from FoxIO outlined these vulnerabilities, emphasizing that their impact varies with the TLS library used in the device’s firmware and how certificate checks are configured.
Details of the Vulnerabilities
The most critical issue, labeled CVE-2026-115881 with a CVSS score of 9.1, affects GoAhead versions 3.4.5 to 6.1.0 built with OpenSSL or a compatible library. When configured for mutual TLS (mTLS) using a certificate revocation list (CRL), the server reads the list but fails to instruct OpenSSL to use it, allowing revoked certificates to remain valid without warning administrators.
A second vulnerability, with a CVSS score of 5.9 but no CVE, affects GoAhead 4.0.2 through 6.1.0 versions using Mbed TLS. A coding error weakens the encryption in some TLS 1.2 connections, making them susceptible to offline decryption if the client accepts flawed parameters.
The third flaw, CVE-2026-115884, with a CVSS score of 7.4, impacts GoAhead versions up to 6.1.0 built with LibreSSL 3.2.x or 3.3.2 to 3.3.6. It allows attackers to bypass the certificate chain length cap on servers that accept client certificates from any issuer.
Mitigation and Industry Impact
GoAhead version 6.1.1, released on August 2, addresses the OpenSSL and Mbed TLS issues. FoxIO advises disabling finite-field DHE cipher suites or switching to the OpenSSL backend to protect Mbed TLS builds. For the issue with LibreSSL, enabling issuer verification with a trusted CA bundle or upgrading to OpenSSL or LibreSSL 4.x is recommended.
FoxIO has provided proof-of-concept code and fingerprints to help defenders identify GoAhead servers on the internet and determine their dependent TLS libraries. Companies like Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, and Boeing utilize GoAhead, although it’s unclear if they are affected by these vulnerabilities.
John Althouse, FoxIO’s founder and CTO, warns that while upstream fixes are available, actual patches for devices depend on their manufacturers’ actions.
Related concerns include CISA’s warnings on Node2Shell exploitation and PHP2Shell vulnerabilities, emphasizing the growing need for robust cybersecurity measures.
