Legion of the Bouncy Castle
Vulnerability activity for Legion of the Bouncy Castle: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 2
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 14
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 15
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 8.7HighOct 3, 2026Legion of the Bouncy Castle BC-JAVACVE-2026-71888In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about whether authenticated attributes were present. RFC 5652 sec. 9.1 pairs the two, requiring that authAttrs be present whenever digestAlgorithm is, and sec. 9.2 makes the MAC cover the DER encoding of authAttrs when they are present and the eContent OCTET STRING directly when they are not. CMSAuthenticatedDataParser has to choose between tho
- 8.7HighOct 3, 2026Legion of the Bouncy Castle BC-JAVA Crypto / certificateCVE-2026-71889In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPathReviewer - applied X.509 name constraints to the end-entity certificate. checkNameConstraints walked the path with a loop bound of index greater than zero, which is the bound the CA-only steps require, but index zero is the target certificate under the standard CertPath ordering, so the permitted and excluded subtree chec
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVA Denial of serviceCVE-2026-13506In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVA Crypto / certificateCVE-2026-12860In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12.
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVACVE-2026-12816In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12.
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVACVE-2026-12803In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS before 2.73.12.
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVACVE-2026-12802In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVA Denial of serviceCVE-2026-14682In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X s
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVACVE-2026-58059In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series)
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVA Denial of serviceCVE-2026-58060In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVACVE-2026-58061In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVA Crypto / certificateCVE-2026-59639In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X ser
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVACVE-2026-59642In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X
- 8.7HighAug 3, 2026Legion of the Bouncy Castle BC-JAVA Denial of serviceCVE-2026-59645In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcutil-fips 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series).
- 8.9HighApr 15, 2026Legion of the Bouncy Castle BC-JAVACVE-2026-5598Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
See every Legion of the Bouncy Castle entry on the dashboard.
Top products
- BC-JAVA15 CVEs in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- Atlassian · Oct 20, 2026Atlassian Security Bulletin October 20, 2026CVE-2026-12860CVE-2026-58061CVE-2026-59645CVE-2026-71888CVE-2026-71889
- Atlassian · Aug 18, 2026Atlassian Security Bulletin August 18, 2026CVE-2026-12802CVE-2026-12803CVE-2026-12816CVE-2026-13506CVE-2026-14682CVE-2026-58059
- Atlassian · Jul 21, 2026Atlassian Security Bulletin July 21, 2026CVE-2026-5598
- Atlassian · May 19, 2026Atlassian Security Bulletin May 19, 2026CVE-2026-5598
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.