Search: CVE-2026-59639

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.2%	CVE-2026-59639Legion of the Bouncy Castle BC-JAVA · Improper Verification of Cryptographic Signature High8.7EPSS 0.2%2026-08-03CVE Database V5CVE-2026-59639 CVE-2026-59639 is a high severity vulnerability in Legion of the Bouncy Castle Inc.'s BC-JAVA library. The issue occurs in versions before 1.85 and certain 2.73.x versions, where the CMS verifySignatures method incorrectly returns true for SignedData objects that have zero signers. This improper verification of cryptographic signatures can undermine the trustworthiness of signature validation in affected versions. EPSS 0.2%Vulnerability CWE-347	CVE Database V5	2026-08-03

Page 1 of 1 · 1 duplicate CVE record merged