Log in Start free

Vulnerability · Published Apr 15, 2026 · Assigned by bcorg

CVE-2026-5598Non-constant time comparisons risk private key leakage in FrodoKEM.

High 7.5

In plain English

A high-severity security flaw in BC-JAVA from Legion of the Bouncy Castle Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.9%top 40.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12bouncycastleno fix listedDEBIAN-CVE-2026-5598
Debian:13bouncycastleno fix listedDEBIAN-CVE-2026-5598
Debian:14bouncycastle1.86-1DEBIAN-CVE-2026-5598
Mavenorg.bouncycastle:bcprov-jdk141.84GHSA-p93r-85wp-75v3
Mavenorg.bouncycastle:bcprov-jdk15to181.80.2GHSA-p93r-85wp-75v3
Mavenorg.bouncycastle:bcprov-jdk18on1.84GHSA-p93r-85wp-75v3
Mavenorg.bouncycastle:bcprov-jdk18on1.84GHSA-p93r-85wp-75v3
Mavenorg.bouncycastle:bcprov-jdk18on1.80.2GHSA-p93r-85wp-75v3
Ubuntu:25.10bouncycastleno fix listedUBUNTU-CVE-2026-5598
Ubuntu:26.04:LTSbouncycastleno fix listedUBUNTU-CVE-2026-5598
Ubuntu:26.10bouncycastleno fix listedUBUNTU-CVE-2026-5598

Affected products (as reported)

VendorProductVersions
Legion of the Bouncy Castle Inc. BC-JAVA 1.71 – before 1.80.21.81 – before 1.81.11.82 – before 1.84

Weakness: CWE-385 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References