search
Bouncy Castle
Trends
- 1Critical CVE-2026-71885 flagged in Bouncy Castle BC-Java●CRITICAL CVE-2026-71885 in Bouncy Castle BC-JAVA ( https:// radar.offseq.com/threat/cve-20 26-71885-cwe-295-improper-cer
Security teams are being alerted to CVE-2026-71885, a critical vulnerability in Legion of the Bouncy Castle's BC-Java cryptography library. The flaw involves improper certificate validation (CWE-295), meaning affected Java applications could trust forged or invalid certificates, opening the door to man-in-the-middle attacks. Given how widely BC-Java is embedded in Java infrastructure, administrators are advised to track for patches and assess exposure.
- 2Bouncy Castle Java library hit by new signature verification flaw●CVE-2026-71887 | Legion of the Bouncy Castle BC-JAVA https:// radar.offseq.com/threat/cve-20 26-71887-cwe-347-improper-v
A new vulnerability, CVE-2026-71887, has been disclosed affecting the Legion of the Bouncy Castle cryptography library for Java. The flaw is classed as CWE-347, improper verification of cryptographic signature, meaning the library may accept signatures it should reject. Security researchers are sharing the advisory and tracking potential impact on Java applications relying on the widely used library.