CVE-2026-0636 LDAP Injection Vulnerability in LDAPStoreHelper.java

🗓️ 15 Apr 2026 08:59:12Reported by bcorgType

CVE-2026-0636 LDAP injection in LDAPStoreHelper.java affects BC bcprov from 1.49 to 1.83.

Reporter	Title	Published	Views	Family All 125
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-3505, CVE-2025-14813, CVE-2026-0636, CVE-2026-5598, CVE-2026-33671, CVE-2026-33672, CVE-2026-5588, CVE-2026-40175)	8 Jun 202613:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	7 May 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Technical Support Appliance is affected by an LDAP Injection Vulnerability in Bouncy Castle BC-JAVA	8 Jun 202612:05	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	1 Jun 202608:35	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in bcprov-jdk18on-1.81.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-0636)	29 May 202609:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition	11 Jun 202612:09	–	ibm
ATTACKERKB	CVE-2026-0636	15 Apr 202608:59	–	attackerkb
Chainguard	CVE-2026-0636 vulnerabilities	18 Apr 202619:17	–	cgr
Circl	CVE-2026-0636	15 Apr 202613:40	–	circl
CNNVD	Bouncy Castle Java 安全漏洞	15 Apr 202600:00	–	cnnvd

[
  {
    "vendor": "Legion of the Bouncy Castle Inc.",
    "product": "BC-JAVA",
    "platforms": [
      "all"
    ],
    "collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java/",
    "packageName": "bcprov",
    "repo": "https://github.com/bcgit/bc-java",
    "modules": [
      "prov"
    ],
    "programFiles": [
      "LDAPStoreHelper"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "1.74",
        "lessThan": "1.80.2",
        "versionType": "maven"
      },
      {
        "status": "affected",
        "version": "1.81",
        "lessThan": "1.81.1",
        "versionType": "maven"
      },
      {
        "status": "affected",
        "version": "1.82",
        "lessThan": "1.84",
        "versionType": "maven"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
github	www.github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636
github	www.github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde

18 May 2026 23:20Current

CVSS 46.9

EPSS0.00022

CWE-90