{"schema_version":1,"title":"Legion of the Bouncy Castle Inc. BouncyCastle.Cryptography vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Legion of the Bouncy Castle Inc. BouncyCastle.Cryptography: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-63571, was published on 2 October 2026. Nothing in the last four weeks, down from 6 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/technologies/legion-of-the-bouncy-castle-inc-bouncycastle-cryptography","json_url":"https://junglewise.ai/threats/technologies/legion-of-the-bouncy-castle-inc-bouncycastle-cryptography.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/legion-of-the-bouncy-castle-inc-bouncycastle-cryptography","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":0,"all_time":6,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":6},"latest":[{"cve":"CVE-2026-63571","epss":0.0017,"slug":"cve-2026-63571-improper-verification-of-cryptographic-signature-in-the-attribute","title":"Bouncy Castle attribute certificate signature validation bypass","severity":"info","exploited":false,"published_at":"2026-10-02T08:17:01.993+00:00","url":"https://junglewise.ai/threats/cve-2026-63571-improper-verification-of-cryptographic-signature-in-the-attribute"},{"cve":"CVE-2026-103603","epss":0.0041,"slug":"cve-2026-103603-memory-allocation-with-excessive-size-value-in-the-hss-lms","title":"Bouncy Castle C# HSS/LMS memory exhaustion in public key parsing","severity":"info","exploited":false,"published_at":"2026-10-02T08:17:00.837+00:00","url":"https://junglewise.ai/threats/cve-2026-103603-memory-allocation-with-excessive-size-value-in-the-hss-lms"},{"cve":"CVE-2026-103601","epss":0.0029,"slug":"cve-2026-103601-release-of-unverified-plaintext-in-the-ccm-ccmblockcipher-and","title":"Bouncy Castle CCM AEAD decryption plaintext disclosure","severity":"info","exploited":false,"published_at":"2026-10-02T08:17:00.527+00:00","url":"https://junglewise.ai/threats/cve-2026-103601-release-of-unverified-plaintext-in-the-ccm-ccmblockcipher-and"},{"cve":"CVE-2026-103600","epss":0.0032,"slug":"cve-2026-103600-uncontrolled-recursion-in-the-asn-1-parser-asn1inputstream","title":"Bouncy Castle ASN.1 parser uncontrolled recursion","severity":"info","exploited":false,"published_at":"2026-10-02T08:17:00.363+00:00","url":"https://junglewise.ai/threats/cve-2026-103600-uncontrolled-recursion-in-the-asn-1-parser-asn1inputstream"},{"cve":"CVE-2026-63569","epss":0.004,"slug":"cve-2026-63569-improper-input-validation-in-dhagreement-calculateagreement-mti","title":"Bouncy Castle C# DHAgreement improper input validation","severity":"info","exploited":false,"published_at":"2026-10-02T07:16:37.43+00:00","url":"https://junglewise.ai/threats/cve-2026-63569-improper-input-validation-in-dhagreement-calculateagreement-mti"},{"cve":"CVE-2026-63567","epss":0.0047,"slug":"cve-2026-63567-observable-discrepancy-in-iesengine-decryptblock-in-legion-of-the","title":"Bouncy Castle C# IesEngine padding oracle in CBC mode","severity":"info","exploited":false,"published_at":"2026-10-02T07:16:37.127+00:00","url":"https://junglewise.ai/threats/cve-2026-63567-observable-discrepancy-in-iesengine-decryptblock-in-legion-of-the"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Legion of the Bouncy Castle Inc. Bc-Csharp","slug":"bc-csharp","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/bc-csharp"},{"name":"Legion of the Bouncy Castle Inc. Bouncy Castle Java Cryptography APIs","slug":"bc-java","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/bc-java"}],"technology":{"hub":true,"name":"Legion of the Bouncy Castle Inc. BouncyCastle.Cryptography","slug":"legion-of-the-bouncy-castle-inc-bouncycastle-cryptography","vendor":{"hub":true,"name":"Legion of the Bouncy Castle Inc.","slug":"legion-of-the-bouncy-castle-inc","url":"https://junglewise.ai/threats/vendors/legion-of-the-bouncy-castle-inc"},"aliases":[],"category":"library","homepage":"https://www.bouncycastle.org/","description":"C# cryptography library implementing algorithms for encryption, hashing, and key exchange.","url":"https://junglewise.ai/threats/technologies/legion-of-the-bouncy-castle-inc-bouncycastle-cryptography"},"most_severe":[{"cve":"CVE-2026-63567","epss":0.0047,"slug":"cve-2026-63567-observable-discrepancy-in-iesengine-decryptblock-in-legion-of-the","title":"Bouncy Castle C# IesEngine padding oracle in CBC mode","severity":"info","exploited":false,"published_at":"2026-10-02T07:16:37.127+00:00","url":"https://junglewise.ai/threats/cve-2026-63567-observable-discrepancy-in-iesengine-decryptblock-in-legion-of-the"},{"cve":"CVE-2026-103603","epss":0.0041,"slug":"cve-2026-103603-memory-allocation-with-excessive-size-value-in-the-hss-lms","title":"Bouncy Castle C# HSS/LMS memory exhaustion in public key parsing","severity":"info","exploited":false,"published_at":"2026-10-02T08:17:00.837+00:00","url":"https://junglewise.ai/threats/cve-2026-103603-memory-allocation-with-excessive-size-value-in-the-hss-lms"},{"cve":"CVE-2026-63569","epss":0.004,"slug":"cve-2026-63569-improper-input-validation-in-dhagreement-calculateagreement-mti","title":"Bouncy Castle C# DHAgreement improper input validation","severity":"info","exploited":false,"published_at":"2026-10-02T07:16:37.43+00:00","url":"https://junglewise.ai/threats/cve-2026-63569-improper-input-validation-in-dhagreement-calculateagreement-mti"},{"cve":"CVE-2026-103600","epss":0.0032,"slug":"cve-2026-103600-uncontrolled-recursion-in-the-asn-1-parser-asn1inputstream","title":"Bouncy Castle ASN.1 parser uncontrolled recursion","severity":"info","exploited":false,"published_at":"2026-10-02T08:17:00.363+00:00","url":"https://junglewise.ai/threats/cve-2026-103600-uncontrolled-recursion-in-the-asn-1-parser-asn1inputstream"},{"cve":"CVE-2026-103601","epss":0.0029,"slug":"cve-2026-103601-release-of-unverified-plaintext-in-the-ccm-ccmblockcipher-and","title":"Bouncy Castle CCM AEAD decryption plaintext disclosure","severity":"info","exploited":false,"published_at":"2026-10-02T08:17:00.527+00:00","url":"https://junglewise.ai/threats/cve-2026-103601-release-of-unverified-plaintext-in-the-ccm-ccmblockcipher-and"},{"cve":"CVE-2026-63571","epss":0.0017,"slug":"cve-2026-63571-improper-verification-of-cryptographic-signature-in-the-attribute","title":"Bouncy Castle attribute certificate signature validation bypass","severity":"info","exploited":false,"published_at":"2026-10-02T08:17:01.993+00:00","url":"https://junglewise.ai/threats/cve-2026-63571-improper-verification-of-cryptographic-signature-in-the-attribute"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}