EUVD-2026-22872

🗓️ 17 Apr 2026 18:31:50Reported by EUVDType

Covert timing channel in BC-JAVA core risks FrodoKEM private key leakage via non constant time comparisons.

Reporter	Title	Published	Views	Family All 120
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in Bouncy Castle Crypto (CVE-2025-14813, CVE-2026-5598)	21 May 202615:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in Bouncy Castle bcprov-jdk (CVE-2025-14813, CVE-2026-5598)	27 May 202614:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j and Bouncy Castle.	11 May 202606:59	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in bcprov-jdk18on-1.81.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-14813)	29 May 202609:00	–	ibm
ATTACKERKB	CVE-2026-5598	15 Apr 202609:05	–	attackerkb
Atlassian	Covert timing channel at org.bouncycastle:bcprov-jdk18on dependency in Bamboo Data Center	11 May 202623:29	–	atlassian
Atlassian	Covert timing channel vulnerability at Bouncy Castle dependency at Crucible Server	11 May 202623:29	–	atlassian
Chainguard	CVE-2026-5598 vulnerabilities	27 Apr 202601:17	–	cgr
Circl	CVE-2026-5598	15 Apr 202613:25	–	circl
CNNVD	Bouncy Castle Java 安全漏洞	15 Apr 202600:00	–	cnnvd

[
  {
    "enisaIdVendor": [
      {
        "id": "2b939ec1-56db-3718-bd67-c230ebf43791",
        "vendor": {
          "name": "Legion of the Bouncy Castle Inc."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "802d6810-0e19-3833-9c61-746dfb805950",
        "product": {
          "name": "BC-JAVA"
        },
        "product_version": "2.17.3 <1.84"
      }
    ]
  }
]

Source	Link
github	www.github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-5598

17 Apr 2026 18:31Current

5.8Medium risk

Vulners AI Score5.8

CVSS 410

EPSS0.00022

SSVC