CVE-2026-59650

Опубликовано: 03 авг. 2026

Источник: debian

EPSS Низкий

Описание

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
bouncycastle	unfixed			package

Примечания

https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059650
Fixed by: https://github.com/bcgit/bc-java/commit/daeaae9d7075d04f40812e68671ebf4c777b5148 (r1rv85)

EPSS

Процентиль: 19%

0.00269

Низкий

Связанные уязвимости

CVE-2026-59650

CVSS3: 9.1

ubuntu

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-59650

CVSS3: 7.4

redhat

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-59650

CVSS3: 9.1

nvd

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

GHSA-ghgq-7g74-28wp

CVSS3: 9.1

github

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

openSUSE-SU-2026:21538-1

suse-cvrf

около 2 месяцев назад

Security update for bouncycastle

EPSS

Процентиль: 19%

0.00269

Низкий