Critical 9.1
CVE-2026-115881
FoxIO Releases Proof-of-Concept Exploit for EmbedThis GoAhead Vulnerability CVE-2026-115881
Vendor / product: EmbedThis GoAhead
Event date: 2026-10-26
Public PoC: Yes
First tracked by RiskWire: 2026-10-28
Sources & citations (5)
- GoAhead TLS Flaws Permit Revoked Certificates and Expose Sessions to Decryption mallory.ai · 2026-10-27
- Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication gbhackers.com · 2026-10-28
- Critical GoAhead Flaw Accepts Revoked mTLS Certificates cyberkendra.com · 2026-10-27
- Critical GoAhead Vulnerability Lets Attackers Authenticate Using Revoked Certificates cyberpress.org · 2026-10-28
- GoAhead-TLS-Fehler akzeptieren widerrufene Zertifikate und geben Sitzungsschlüssel preis news.lavx.hu · 2026-10-27
References
See CVE-2026-115881 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →