Search: CVE-2026-12860

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.2%	CVE-2026-12860Legion of the Bouncy Castle BC-JAVA · Improper Verification of Cryptographic Signature High8.7EPSS 0.2%2026-08-03CVE Database V5CVE-2026-12860 CVE-2026-12860 is a high-severity vulnerability in Legion of the Bouncy Castle Inc.'s BC-JAVA library affecting versions before 1.85 and LTS versions before 2.73.12. The flaw involves improper verification of RSA PKCS#1 cryptographic signatures, where the last two hash bytes are skipped in the NULL-omitted verification path. This can lead to incorrect signature validation. EPSS 0.2%Vulnerability CWE-347	CVE Database V5	2026-08-03

Page 1 of 1 · 4 duplicate CVE records merged