{"id":"thehackernews-dc1f78b83e65","seq":1652893,"kind":"news","title":"GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption","url":"https://thehackernews.com/2026/10/goahead-tls-flaws-allow-revoked-client.html","permalink":"https://vulnpulse.app/items/thehackernews-dc1f78b83e65","summary":"The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server checks a client certificate and vice versa, and a revocation list is configured to block revoked","severity":null,"techs":["openssl"],"cves":[],"tags":[],"source":{"id":"thehackernews","name":"The Hacker News"},"published_at":"2026-10-27T13:59:48.000Z","fetched_at":"2026-10-27T16:37:51.219Z"}