Three TLS Bugs in GoAhead

Three independent vulnerabilities exist in GoAhead's TLS implementations affecting hundreds of millions of IoT, firewall, OT, and military devices from vendors including Palo Alto Networks, Comcast, Siemens, and Boeing. The bugs range from critical to medium severity and include: an OpenSSL-compatible backend flaw that accepts revoked client certificates despite CRL configuration (CVSS 9.1), a LibreSSL issue bypassing certificate chain-depth restrictions (CVSS 7.4), and an Mbed TLS buffer error that makes DHE_RSA sessions decryptable (CVSS 5.9). All affected GoAhead versions 6.1.0 and earlier require upgrading to 6.1.1 or implementing specific mitigations depending on the TLS backend used.