DEBIAN-CVE-2026-58060

🗓️ 03 Aug 2026 03:16:45Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Unbounded HSS level count in Bouncy Castle Java causes huge verify allocations.

Reporter	Title	Published	Views	Family All 56
IBM Security Bulletins	Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in Bouncy Castle for Java	8 Sep 202614:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Global Availability Mailbox is affected by vulnerabilities in bouncy castle	15 Sep 202604:25	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202605:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect VM Manager Tool and Scans Relay as part of IBM License Metric Tool Software as a Service	24 Aug 202614:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to issues like Memory allocation, verification and validation issues due to the use of Bouncy Castle for Java (CVE-2026-12185, CVE-2026-12803, CVE-2026-12816, CVE-2026-12860 are some of the example CVEs).	12 Sep 202615:02	–	ibm
ATTACKERKB	CVE-2026-58060	3 Aug 202602:37	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : bouncycastle, bouncycastle-javadoc, bouncycastle-mail (ALAS2023-2026-2153)	14 Sep 202600:00	–	nessus
Tenable Nessus	openSUSE 16: bouncycastle / bouncycastle-javadoc / bouncycastle-jmail / etc (openSUSE-SU-2026:21538-1)	8 Aug 202600:00	–	nessus
Tenable Nessus	SUSE SLED15: bouncycastle / bouncycastle-pg / bouncycastle-pkix / etc (SUSE-SU-2026:3559-1)	12 Aug 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-58060	3 Aug 202600:00	–	nessus

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-58060

14 Sep 2026 17:03Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.5

EPSS0.00651

hss level count verify allocations bouncy castle java long term support fips variants