CVE-2026-59650

Опубликовано: 03 авг. 2026

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

Ссылки

https://github.com/bcgit/bc-java/commit/daeaae9d7075d04f40812e68671ebf4c777b5148
Patch
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059650
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*

Версия до 1.85 (исключая)

cpe:2.3:a:bouncycastle:bouncy_castle_for_java_lts:*:*:*:*:*:*:*:*

Версия до 2.73.11 (включая)

EPSS

Процентиль: 19%

0.00269

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVE-2026-59650

CVSS3: 9.1

ubuntu

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-59650

CVSS3: 7.4

redhat

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-59650

CVSS3: 9.1

debian

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiat ...

GHSA-ghgq-7g74-28wp

CVSS3: 9.1

github

около 2 месяцев назад

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

openSUSE-SU-2026:21538-1

suse-cvrf

около 2 месяцев назад

Security update for bouncycastle

EPSS

Процентиль: 19%

0.00269

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-20