GHSA-ghgq-7g74-28wp

Опубликовано: 03 авг. 2026

Источник: github

Github: Не прошло ревью

CVSS4: 9.3

CVSS3: 9.1

Описание

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

Ссылки

EPSS

Процентиль: 19%

0.00269

Низкий

9.3 Critical

CVSS4

9.1 Critical

CVSS3

CVE ID

CVE-2026-59650

Дефекты

CWE-20

Связанные уязвимости

CVE-2026-59650

CVSS3: 9.1

ubuntu

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-59650

CVSS3: 7.4

redhat

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-59650

CVSS3: 9.1

nvd

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-59650

CVSS3: 9.1

debian

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiat ...

openSUSE-SU-2026:21538-1

suse-cvrf

около 2 месяцев назад

Security update for bouncycastle

EPSS

Процентиль: 19%

0.00269

Низкий

9.3 Critical

CVSS4

9.1 Critical

CVSS3

CVE ID

CVE-2026-59650

Дефекты

CWE-20