I just read about this one. CVE-2026-115881 and CVE-2026-115884: including issues with lack of revocation checking, mTLS validation bypass and a trivial DHE private value usage (this last one doesn’t have a CVE for some reason). https://thehackernews.com/2026/10/goahead-tls-flaws-allow-revoked-client.html The mTLS one seems most serious as that can allow improper authentication. The DHE vulnerability is kind of hilarious, because it uses a single byte for one of its values, making one of the likely scenario of it using… “4”. I found a few articles that mention Palo Alto using the library, but I can find no PA advisory yet. Anyone has info on that?   submitted by   /u/Cormacolinde [link]   [comments]