CVE-2026-12816 describes a cryptographic vulnerability in Bouncy Castle for Java versions prior to 1.85 and LTS versions before 2.73.12. The IESEngine component, which uses stream-mode MACs, is susceptible to forgery because the key derivation function splits keys based on message length in a way that can be exploited. This weakness undermines the integrity guarantees of the MAC, potentially allowing an attacker to forge valid MACs without knowledge of the secret key.

The vulnerability allows an attacker to forge message authentication codes (MACs) in the IESEngine stream mode, compromising message integrity. This could lead to undetected tampering of messages protected by this cryptographic primitive. There is no indication of privilege escalation or confidentiality loss directly from this issue. No known exploits in the wild have been reported at this time.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider avoiding the use of IESEngine stream-mode MAC or apply alternative cryptographic methods that do not rely on the vulnerable KDF split. Monitoring vendor communications for updates is recommended.