PT-2026-67228

🗓️ 03 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 41 Views

BC Java CCM modes write plaintext to caller buffer before tag verification in affected versions.

Reporter	Title	Published	Views	Family All 224
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java	22 Oct 202619:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i	15 Sep 202613:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026	17 Sep 202614:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for August 2026	31 Aug 202610:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Netty affect IBM Sterling B2B Integrator and IBM Sterling File Gateway	22 Oct 202621:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Netty	9 Oct 202616:33	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	16 Sep 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Bouncy Castle	16 Sep 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Configuration Manager is affected by multiple Bouncy Castle vulnerabilities that could cause denial of service, resource exhaustion, cryptographic verification bypass, or other security impacts.	3 Sep 202613:07	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2026-59641
osv	www.osv.dev/vulnerability/openSUSE-SU-2026:11445-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-66021
suse	www.suse.com/security/cve/CVE-2026-59651
osv	www.osv.dev/vulnerability/openSUSE-SU-2026:21538-1
bugzilla	www.bugzilla.suse.com/1272715
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59898
osv	www.osv.dev/vulnerability/CVE-2026-12802
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-13586
osv	www.osv.dev/vulnerability/CVE-2026-59650

08 Oct 2026 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 48.7

CVSS 3.17.5

EPSS0.00282

SSVC

Bouncy Castle Java plaintext exposure tag verification order affected versions