Do you use mutual TLS with your network appliances? You might want to check whether they use a vulnerable version of the GoAhead web server, which has some significant weaknesses in its client certificate verification.
https://ifin.network/t/goahead-tls-vulnerabilities-break-certificate-validation-session-encryption/934
#ThreatIntel #IFIN
IFIN - The Independent Federated Intelligence Network
npub1qm…nh363
2026-10-27 22:59:34 UTC
Author Public Key
npub1qm4tytdmranfklywc562p7gprs702mzkc4usqv6t8ja3d340evpslnh363Seen on
wss://relay.momostr.pinkPublished at
2026-10-27 22:59:34 UTCEvent JSON
{
"id": "1333a663c6b8dcd2b5c7822c605e7bf2c5ffb4c97871e63e8fce991cf673bf7f",
"pubkey": "06eab22dbb1f669b7c8ec534a0f9011c3cf56c56c57900334b3cbb16c6afcb03",
"created_at": 1793141974,
"kind": 1,
"tags": [
[
"t",
"ifin"
],
[
"t",
"threatintel"
],
[
"proxy",
"https://infosec.exchange/@ifin/117515352460478069",
"web"
],
[
"proxy",
"https://infosec.exchange/ap/users/115741367687413652/statuses/117515352460478069",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/115741367687413652/statuses/117515352460478069",
"pink.momostr"
],
[
"-"
]
],
"content": "Do you use mutual TLS with your network appliances? You might want to check whether they use a vulnerable version of the GoAhead web server, which has some significant weaknesses in its client certificate verification.\n\nhttps://ifin.network/t/goahead-tls-vulnerabilities-break-certificate-validation-session-encryption/934\n\n#ThreatIntel #IFIN",
"sig": "4f921fd7d7c56ece6ac701bad9743120e2336e3a38e6ffe0a1638d5ca8860c100375ec172c89aadb03e40aeae7cd5e53ae0ccdd8852a5591cd1a540efa28b323"
}