LLegion of the Bouncy Castle Inc.

Products

Exploited and recent CVEs

• CVE-2026-71884 High 8.2 Packet CTR reports a full success length after the counter is exhausted 0.3%
• CVE-2026-71890 High 8.7 MLS external commit can remove an arbitrary group member 0.2%
• CVE-2026-71891 High 7.1 BLS12-381 key validation accepts a public key built on a foreign curve 0.2%
• CVE-2026-18040 Medium 5.9 HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler 0.1%
• CVE-2026-71885 Critical 9.2 MLS X.509 credential not bound to the LeafNode signature key 0.2%
• CVE-2026-71886 High 8.2 OpenPGP certification accepted from a subkey without certification authority 0.2%
• CVE-2026-71887 High 8.2 OpenPGP data signature accepted from a signing subkey without cross-certification <0.1%
• CVE-2026-71883 High 8.2 Native AES packet cipher returns the raw AES key on an alias 0.3%
• CVE-2026-71888 High 8.7 CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent 0.1%
• CVE-2026-71888 High 8.7 CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent 0.1%
• CVE-2026-71888 High 8.7 CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent 0.1%
• CVE-2026-71889 High 8.7 PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate 0.2%
• CVE-2026-71889 High 8.7 PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate 0.2%
• CVE-2026-71889 High 8.7 PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate 0.2%
• CVE-2026-71892 Medium 6.9 CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys 0.2%
• CVE-2026-71892 Medium 6.9 CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys 0.2%
• CVE-2026-85515 High 8.2 OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check 0.2%
• CVE-2026-85515 High 8.2 OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check 0.2%
• CVE-2026-85515 High 8.2 OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check 0.2%
• CVE-2026-97873 Medium 5.3 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider 0.3%
• CVE-2026-97873 Medium 5.3 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider 0.3%
• CVE-2026-18036 High 8.2 NTRU leaks private key information by reducing secret values with a non-constant-time integer division 0.3%
• CVE-2026-17508 Medium 5.3 Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points 0.4%
• CVE-2026-17508 Medium 5.3 Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points 0.4%
• CVE-2026-17508 Medium 5.3 Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points 0.4%
• CVE-2026-17507 High 8.7 MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender 0.4%
• CVE-2026-103604 High 8.7 Quadratic-time escaping when converting X.509 distinguished names to strings 0.3%
• CVE-2026-103603 High 8.7 Unbounded HSS public key level count allows huge array allocation during signature verification 0.5%
• CVE-2026-103602 High 8.2 Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts 0.2%
• CVE-2026-103601 High 8.2 CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check 0.3%