cyfenced.com →

[ CVE-2026-5598 · Published 15 Apr 2026 ]

Vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA

CVSS 7.5 EPSS <1%3 agency advisoriesNo fix listed yet

[ Description ]Official description

Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

  • NCSC-NLNCSC-2026-0448

    Vulnerabilities fixed in Oracle Fusion Middleware Translated from Dutch

    Probability/damage H/HCVE-2026-54513CVE-2026-56741CVE-2026-59649+191 more CVEs
  • BSI CERT-BundWID-SEC-2026-4078

    Oracle Fusion Middleware: Multiple vulnerabilities Translated from German

    CVE-2026-91212CVE-2023-43622CVE-2026-42779+191 more CVEs
  • CERT-FRCERTFR-2026-AVI-1256

    Multiple vulnerabilities in IBM products Translated from French

    Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

    CVE-2026-27980CVE-2026-58055CVE-2026-49978+360 more CVEs

[ References ]References