ForgeCert

ForgeCert ForgeCert uses the BouncyCastle C API and a stolen Certificate Authority CA certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple BouncyCastle vulnerabilities (CVE-2026-13506, CVE-2026-14682)

Summary IBM DevOps Deploy / IBM UrbanCode Deploy UCD uses bouncy-castle to parse and load PEM format certs. CVE-2026-13506, CVE-2026-14682. Vulnerability Details CVEID:CVE-2026-13506 DESCRIPTION: In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This...

OPENSUSE-SU-2026:12090-1 bouncycastle-1.86-1.1 on GA media

These are all security issues fixed in the bouncycastle-1.86-1.1 package on the GA media of openSUSE Tumbleweed...

ROOT-APP-MAVEN-CVE-2025-8916 CVE-2025-8916 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2025-8916 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-5588 CVE-2026-5588 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2026-5588 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation. PKIXCertPathReviewer.checkNameConstraints in org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer and org.bouncycastle.x509.PKIXCertPathReviewer. An attacker can get a constrained certificate chain accepted...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation. PKIXCertPathReviewer.checkNameConstraints in org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer and org.bouncycastle.x509.PKIXCertPathReviewer. An attacker can get a constrained certificate chain accepted...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation. PKIXCertPathReviewer.checkNameConstraints in org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer and org.bouncycastle.x509.PKIXCertPathReviewer. An attacker can get a constrained certificate chain accepted...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation. PKIXCertPathReviewer.checkNameConstraints in org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer and org.bouncycastle.x509.PKIXCertPathReviewer. An attacker can get a constrained certificate chain accepted...

org.bouncycastle:bcjmail-debug-jdk18on (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk18on (>=1.81, <=1.85) +1 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-debug-jdk18on (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk18on MAVEN version =1.81, =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536974...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-debug-jdk15to18 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536904...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85) potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-debug-jdk14 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk14 MAVEN version =1.81, =1.81, =1.85 Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536972...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-debug-jdk15to18 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71892 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536912...

org.bouncycastle:bcjmail-debug-jdk18on (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk18on (>=1.81, <=1.85) +1 more potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-debug-jdk18on (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk18on MAVEN version =1.81, =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71892 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536913...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) +4 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-debug-jdk15to18 (>=1.81, <=1.85.1)

org.bouncycastle:bcprov-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-18040 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536925...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the PBEPBKDF2 implementation in prov/src/main/java/org/bouncycastle/jcajce/provider/symmetric/PBEPBKDF2.java. An attacker can force excessive CPU work by supplying a...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.85) +3 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.85.1)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

org.bouncycastle:bcmail-jdk14 (>=1.78, <=1.85) potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-jdk14 (>=1.78, <=1.85)

org.bouncycastle:bcpkix-jdk14 MAVEN version =1.78, =1.78, =1.85 Source cves: CVE-2026-71892 Source advisory: MEND:CVE-2026-71892...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-debug-jdk15to18 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71892 Source advisory: MEND:CVE-2026-71892...

org.bouncycastle:bcjmail-debug-jdk18on (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk18on (>=1.81, <=1.85) +1 more potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-debug-jdk18on (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk18on MAVEN version =1.81, =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71892 Source advisory: MEND:CVE-2026-71892...