Zombie POODLE & GOLDENDOODLE Vulnerabilities | Qualys

Summary: Qualys SSL Labs published warnings for four CBC-mode vulnerabilities - Zombie POODLE, GOLDENDOODLE, 0-Length OpenSSL and Sleeping POODLE - that apply to servers using TLS 1.0, 1.1 or 1.2 with CBC cipher modes. SSL Labs began marking CBC cipher suites orange and WEAK in April 2019, with an "F" grade for affected servers from the end of May 2019.
Why it matters: An "F" grade lands on servers that use CBC ciphers and test vulnerable, and the practical fix is constrained: Windows 7 lacks GCM support by design, so disabling CBC ciphers can cut off Internet Explorer 11 on that platform.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026