CVE-2026-12816

Bouncy Castle for Java contains an IESEngine stream-mode MAC forgery flaw via a length-dependent KDF split, affecting versions before 1.85 (and Bouncy Castle for Java LTS before 2.73.12). The issue is documented in CVE-2026-12816 with no exploitation details provided in the supplied sources. No r...

CVE-2026-59641

CVE-2026-59641 affects Bouncy Castle for Java: before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation; also affects Java LTS before 2.73.12 and Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0.7 (1.0.x), 2.0.7 (2.0.x), and 2.1.7 (2.1.x). CVSS v4.0 base scor...

CVE-2026-59648

CVE-2026-59648 affects Bouncy Castle for Java: OpenPGP Argon2 S2K accepts attacker-chosen memory parameters. Vulnerable in BC Java before 1.85, in BC Java LTS before 2.73.12, and in BC Java FIPS (bcpg-fips) before 1.0.13 (1.0.x), 2.0.13 (2.0.x), and 2.1.13 (2.1.x). Per NVD, CVSSv4.0 base score 6....