PT-2026-67240

🗓️ 03 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 23 Views

BC Java CRMF CMP password based MAC uses unbounded iterations.

Reporter	Title	Published	Views	Family All 71
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in bcpkix-jdk18on jar	17 Sep 202612:55	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202605:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Configuration Manager is affected by multiple Bouncy Castle vulnerabilities that could cause denial of service, resource exhaustion, cryptographic verification bypass, or other security impacts.	3 Sep 202613:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bcprov-jdk18on bundled with IBM Fusion and IBM Fusion HCI.	1 Oct 202623:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i	15 Sep 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in third party libraries shipped with IBM Guardium Cryptography Manager (GCM)	28 Sep 202614:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Global Availability Mailbox is affected by vulnerabilities in bouncy castle	15 Sep 202604:25	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202605:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Global Availability Mailbox is affected by vulnerabilities in bouncy castle 1.84	16 Sep 202612:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	27 Aug 202606:11	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-19032
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-14683
suse	www.suse.com/security/cve/CVE-2026-13586
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-2332
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514
osv	www.osv.dev/vulnerability/ghsa-mfg7-5gfp-c4w3
osv	www.osv.dev/vulnerability/CVE-2026-41852
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23868
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-66021
osv	www.osv.dev/vulnerability/CVE-2026-58060

18 Sep 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3 - 9.8

CVSS 46.9

EPSS0.00423

SSVC

password based MAC crmf cmp unbounded iterations java versions fips versions