A vulnerability exists in Bouncy Castle for Java before version 1.85 and in the LTS version before 2.73.12, where the IESEngine stream-mode MAC can be forged due to a length-dependent key derivation function (KDF) split. This issue is tracked as CVE-2026-12816 and is classified under CWE-354 (Improper Validation of Integrity Check Value).