CVE-2026-5588

CVE-2026-5588 is a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the Bouncy Castle Java library's bcpkix modules (BC-JAVA, BCPKIX-FIPS, BCPIX-LTS). The root cause is that the PKIX draft CompositeVerifier (files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderB...