CVE-2026-71886

In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or trust delegation from any component key of the issuing certificate, without requiring that component to have been granted the authority to certify...

CVE-2026-71886

In Bouncy Castle for Java before version 1.86 , the high-level OpenPGP certificate API contains a flaw where it accepts third-party certifications or trust delegations from any component key of an issuing certificate without verifying if that component had the authority to certify. Specifically, ...

EUVD-2026-92002

In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or trust delegation from any component key of the issuing certificate, without requiring that component to have been granted the authority to certify...