Lucene search
+L

8 matches found

Cvelist
Cvelist
•added 2026/08/03 2:53 a.m.•70 views

CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split

In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS0.00179EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/03 2:53 a.m.•11 views

CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split

In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS5.4AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/08/03 2:53 a.m.•9 views

CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split

In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS5.9AI score0.00179EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/03 2:53 a.m.•18 views

EUVD-2026-52135

In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS5.9AI score0.00179EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/03 2:53 a.m.•14 views

CVE-2026-12816

In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS5.9AI score0.00179EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2026/08/03 2:53 a.m.•151 views

CVE-2026-12816

Bouncy Castle for Java contains an IESEngine stream-mode MAC forgery flaw via a length-dependent KDF split, affecting versions before 1.85 (and Bouncy Castle for Java LTS before 2.73.12). The issue is documented in CVE-2026-12816 with no exploitation details provided in the supplied sources. No r...

8.7CVSS5.9AI score0.00179EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/03 12:00 a.m.•2 views

CVE-2026-12816: Improper Validation of Integrity Check Value

In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

8.7CVSS5.9AI score0.00179EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•46 views

PT-2026-67017

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12 Description An issue exists in the IESEngine where a MAC forgery is possible in stream-mode due to a length-dependent KDF split. KDF refers to a...

9.3CVSS5.8AI score0.00616EPSS
SaveExploits0References192
Rows per page
Query Builder