Threats Tagged 'cve-2026-59648'
View all threats tagged with 'cve-2026-59648'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-59648'
Click on any threat for detailed analysis and mitigation recommendations
0 A security update for BouncyCastle version 1.85 addresses multiple critical vulnerabilities affecting cryptographic operations, keystore handling, and data validation. These issues include bypasses, memory allocation flaws, MAC forgery, improper verification, and denial-of-service risks. The update also repackages certain post-quantum cryptography algorithms and deprecates older versions. No specific affected versions are stated beyond the update to 1.85. Join the discussion | GCVE Database | 08/06/2026, 07:36:52 UTC Added: 09/17/2026, 01:58:58 UTC |
0 CVE-2026-12185 is a high severity vulnerability in Legion of the Bouncy Castle Inc.'s BC-JAVA library. It involves memory allocation with excessive size values in BKS/UBER keystore implementations before integrity checks are performed. This affects versions prior to 1.85 and versions from 2.73.0 up to but not including 2.73.12. Join the discussion | CVE Database V5 | 08/04/2026, 00:00:00 UTC Added: 08/03/2026, 01:03:45 UTC |
0 A vulnerability in Bouncy Castle for Java before version 1.85 allows the OpenPGP Argon2 S2K function to honor attacker-chosen memory and passes parameters. This issue also affects multiple Long-Term Support (LTS) and FIPS versions of Bouncy Castle for Java. The vulnerability has a moderate severity score and does not impact confidentiality or integrity but may affect availability. Join the discussion | GCVE Database | 08/03/2026, 03:31:56 UTC Added: 08/29/2026, 15:17:42 UTC |
0 CVE-2026-59648 is a medium severity vulnerability in Bouncy Castle for Java (BC-JAVA) affecting versions before 1.85 and certain LTS and FIPS versions. The issue involves the OpenPGP Argon2 S2K implementation honoring attacker-chosen memory and iteration parameters without limits or throttling, which can lead to resource exhaustion. No official patch or remediation level has been confirmed yet. Join the discussion | CVE Database V5 | 08/03/2026, 00:45:34 UTC Added: 08/03/2026, 01:03:47 UTC |
Showing 1 to 4 of 4 results