cyfenced.com →

[ CVE-2026-8763 · Published 3 Aug 2026 ]

Vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA

CVSS 9.3 EPSS <1%11 agency advisoriesNo fix listed yet

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.3

[ Description ]Official description

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

  • NCSC-NLNCSC-2026-0448

    Vulnerabilities fixed in Oracle Fusion Middleware Translated from Dutch

    Probability/damage H/HCVE-2026-54513CVE-2026-56741CVE-2026-59649+191 more CVEs
  • NCSC-NLNCSC-2026-0444

    Vulnerabilities fixed in Oracle Communications Translated from Dutch

    Probability/damage M/HCVE-2025-48734CVE-2026-5450CVE-2026-6653+28 more CVEs
  • BSI CERT-BundWID-SEC-2026-4090

    Oracle Communications: Multiple vulnerabilities Translated from German

    Risk highCVE-2026-101763CVE-2026-58389CVE-2026-56740+85 more CVEs
  • BSI CERT-BundWID-SEC-2026-4078

    Oracle Fusion Middleware: Multiple vulnerabilities Translated from German

    CVE-2026-91212CVE-2023-43622CVE-2026-42779+191 more CVEs
  • CERT-FRCERTFR-2026-AVI-1336

    Multiple vulnerabilities in IBM products Translated from French

    Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

    CVE-2026-14671CVE-2026-11548CVE-2022-22950+490 more CVEs
  • CERT-FRCERTFR-2026-AVI-1293

    Multiple vulnerabilities in MongoDB Translated from French

    Multiple vulnerabilities have been discovered in MongoDB products. They allow an attacker to cause remote denial of service and a security problem not specified by the vendor.

    CVE-2026-75595CVE-2026-59649CVE-2026-59648+30 more CVEs
  • CERT-FRCERTFR-2026-AVI-1291

    Multiple vulnerabilities in IBM products Translated from French

    Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

    CVE-2026-49978CVE-2025-27895CVE-2026-59651+195 more CVEs
  • CERT-FRCERTFR-2026-AVI-1249

    Multiple vulnerabilities in VMware products Translated from French

    Multiple vulnerabilities have been discovered in VMware products. They allow an attacker to cause a security problem not specified by the vendor.

    CVE-2026-75595CVE-2026-53910CVE-2026-56404+288 more CVEs
  • CERT-FRCERTFR-2026-AVI-1256

    Multiple vulnerabilities in IBM products Translated from French

    Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

    CVE-2026-27980CVE-2026-58055CVE-2026-49978+360 more CVEs
  • BSI CERT-BundWID-SEC-2026-3595

    IBM QRadar SIEM: Multiple vulnerabilities Translated from German

    CVE-2025-54518CVE-2026-44186CVE-2026-59878+151 more CVEs
  • CERT-FRCERTFR-2026-AVI-1233

    Multiple vulnerabilities in IBM products Translated from French

    Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.

    CVE-2021-44906CVE-2026-59651CVE-2026-6402+183 more CVEs

[ References ]References