# Bouncy Castle vulnerabilities Source: https://junglewise.ai/threats/vendors/bouncy-castle Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/bouncy-castle.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 26 vulnerabilities in Bouncy Castle: 0 in the last 7 days and 11 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-71884, was published on 9 October 2026. Nothing in the last four weeks, down from 11 vulnerabilities in the four before. 2 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 11 - All time: 26 (2 critical, 0 exploited in the wild) ## About Bouncy Castle Organization that maintains cryptographic libraries for Java. ## Latest Bouncy Castle vulnerabilities - [CVE-2026-71884: Bouncy Castle Java LTS CTR cipher counter overflow](https://junglewise.ai/threats/cve-2026-71884-in-bouncy-castle-for-java-lts-before-2-73-13-the-native-one-shot) (info, published 9 Oct 2026) - [CVE-2026-85515: Bouncy Castle for Java truncated OpenPGP message acceptance](https://junglewise.ai/threats/cve-2026-85515-in-bouncy-castle-for-java-before-1-86-a-truncated-openpgp) (info, published 3 Oct 2026) - [CVE-2026-71891: Bouncy Castle for Java BLS signature phantom signer](https://junglewise.ai/threats/cve-2026-71891-in-bouncy-castle-for-java-before-1-86-bls12-381basicscheme) (info, published 3 Oct 2026) - [CVE-2026-71890: Bouncy Castle MLS external commit validation bypass](https://junglewise.ai/threats/cve-2026-71890-in-bouncy-castle-for-java-before-1-86-validation-of-an-mls-rfc) (info, published 3 Oct 2026) - [CVE-2026-71889: Bouncy Castle for Java X.509 name constraints bypass in PKIXCertPathReviewer](https://junglewise.ai/threats/cve-2026-71889-in-bouncy-castle-for-java-before-1-86-neither-copy-of) (info, published 3 Oct 2026) - [CVE-2026-71887: Bouncy Castle for Java OpenPGP signature misattribution in subkey binding validation](https://junglewise.ai/threats/cve-2026-71887-in-bouncy-castle-for-java-before-1-86-the-high-level-openpgp-api) (info, published 3 Oct 2026) - [CVE-2026-71886: Bouncy Castle for Java OpenPGP certification validation bypass](https://junglewise.ai/threats/cve-2026-71886-in-bouncy-castle-for-java-before-1-86-the-high-level-openpgp) (info, published 3 Oct 2026) - [CVE-2026-71885: Bouncy Castle for Java MLS credential binding validation bypass](https://junglewise.ai/threats/cve-2026-71885-in-bouncy-castle-for-java-before-1-86-the-messaging-layer) (info, published 3 Oct 2026) - [CVE-2026-18040: Bouncy Castle HQC side-channel information leak](https://junglewise.ai/threats/cve-2026-18040-in-bouncy-castle-for-java-before-1-86-hqc-leaked-secret-derived) (info, published 3 Oct 2026) - [CVE-2026-18036: Bouncy Castle for Java NTRU timing side-channel in modular reduction](https://junglewise.ai/threats/cve-2026-18036-in-bouncy-castle-for-java-before-1-86-ntru-reduced-secret-values) (info, published 2 Oct 2026) - [CVE-2026-17507: Bouncy Castle for Java MLS leaf_index signed comparison integer underflow](https://junglewise.ai/threats/cve-2026-17507-in-bouncy-castle-for-java-before-1-86-the-mls-implementation-org) (info, published 2 Oct 2026) - [CVE-2026-13506: Bouncy Castle ASN.1 sequence nesting-depth guard bypass](https://junglewise.ai/threats/cve-2026-13506-bouncy-castle-asn-1-sequence-nesting-depth-guard-bypass) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-8763: Bouncy Castle Name Constraints bypass via trailing dot in rfc822Name and URI](https://junglewise.ai/threats/cve-2026-8763-bouncy-castle-name-constraints-bypass-via-trailing-dot-in) (critical, CVSS 9.1, published 3 Aug 2026) - [CVE-2026-59650: Bouncy Castle MTI/A0 DH agreement unvalidated peer value](https://junglewise.ai/threats/cve-2026-59650-bouncy-castle-mti-a0-dh-agreement-unvalidated-peer-value) (critical, CVSS 9.1, published 3 Aug 2026) - [CVE-2026-59649: Bouncy Castle OpenPGP denial of service via unbounded subpacket length](https://junglewise.ai/threats/cve-2026-59649-bouncy-castle-openpgp-denial-of-service-via-unbounded-subpacket) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59646: Bouncy Castle DTLS handshake buffer overflow](https://junglewise.ai/threats/cve-2026-59646-bouncy-castle-dtls-handshake-buffer-overflow) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59645: Bouncy Castle for Java OER parser unbounded recursion in IEEE 1609.2 schema](https://junglewise.ai/threats/cve-2026-59645-bouncy-castle-for-java-oer-parser-unbounded-recursion-in-ieee) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59644: Bouncy Castle for Java MLS hash-ratchet generation counter validation bypass](https://junglewise.ai/threats/cve-2026-59644-bouncy-castle-for-java-mls-hash-ratchet-generation-counter) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59642: Bouncy Castle CMS AuthenticatedData MAC bypass with authAttrs](https://junglewise.ai/threats/cve-2026-59642-bouncy-castle-cms-authenticateddata-mac-bypass-with-authattrs) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59640: Bouncy Castle OpenPGP CFB oracle vulnerability in symmetric key paths](https://junglewise.ai/threats/cve-2026-59640-bouncy-castle-openpgp-cfb-oracle-vulnerability-in-symmetric-key) (medium, CVSS 5.3, published 3 Aug 2026) - [CVE-2026-59639: Bouncy Castle for Java CMS signature verification bypass](https://junglewise.ai/threats/cve-2026-59639-bouncy-castle-for-java-cms-signature-verification-bypass) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59638: Bouncy Castle for Java JSSE hostname verifier CN-fallback enabled by default](https://junglewise.ai/threats/cve-2026-59638-bouncy-castle-for-java-jsse-hostname-verifier-cn-fallback-enabled) (medium, CVSS 6.5, published 3 Aug 2026) - [CVE-2026-15055: Bouncy Castle PKCS#8 PBES2 unbounded KDF cost vulnerability](https://junglewise.ai/threats/cve-2026-15055-bouncy-castle-pkcs-8-pbes2-unbounded-kdf-cost-vulnerability) (high, CVSS 8.2, published 3 Aug 2026) - [CVE-2026-12185: Bouncy Castle for Java BKS/UBER keystore memory allocation DoS](https://junglewise.ai/threats/cve-2026-12185-bouncy-castle-for-java-bks-uber-keystore-memory-allocation-dos) (high, CVSS 8.6, published 3 Aug 2026) - [CVE-2026-5588: Bouncy Castle BC-JAVA signature bypass in CompositeVerifier](https://junglewise.ai/threats/cve-2026-5588-bouncy-castle-bc-java-signature-bypass-in-compositeverifier) (medium, CVSS 4, published 15 Apr 2026) ## Most severe Bouncy Castle vulnerabilities - [CVE-2026-8763: Bouncy Castle Name Constraints bypass via trailing dot in rfc822Name and URI](https://junglewise.ai/threats/cve-2026-8763-bouncy-castle-name-constraints-bypass-via-trailing-dot-in) (critical, CVSS 9.1, published 3 Aug 2026) - [CVE-2026-59650: Bouncy Castle MTI/A0 DH agreement unvalidated peer value](https://junglewise.ai/threats/cve-2026-59650-bouncy-castle-mti-a0-dh-agreement-unvalidated-peer-value) (critical, CVSS 9.1, published 3 Aug 2026) - [CVE-2026-12185: Bouncy Castle for Java BKS/UBER keystore memory allocation DoS](https://junglewise.ai/threats/cve-2026-12185-bouncy-castle-for-java-bks-uber-keystore-memory-allocation-dos) (high, CVSS 8.6, published 3 Aug 2026) - [CVE-2026-15055: Bouncy Castle PKCS#8 PBES2 unbounded KDF cost vulnerability](https://junglewise.ai/threats/cve-2026-15055-bouncy-castle-pkcs-8-pbes2-unbounded-kdf-cost-vulnerability) (high, CVSS 8.2, published 3 Aug 2026) - [CVE-2026-59646: Bouncy Castle DTLS handshake buffer overflow](https://junglewise.ai/threats/cve-2026-59646-bouncy-castle-dtls-handshake-buffer-overflow) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59649: Bouncy Castle OpenPGP denial of service via unbounded subpacket length](https://junglewise.ai/threats/cve-2026-59649-bouncy-castle-openpgp-denial-of-service-via-unbounded-subpacket) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59645: Bouncy Castle for Java OER parser unbounded recursion in IEEE 1609.2 schema](https://junglewise.ai/threats/cve-2026-59645-bouncy-castle-for-java-oer-parser-unbounded-recursion-in-ieee) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59644: Bouncy Castle for Java MLS hash-ratchet generation counter validation bypass](https://junglewise.ai/threats/cve-2026-59644-bouncy-castle-for-java-mls-hash-ratchet-generation-counter) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-13506: Bouncy Castle ASN.1 sequence nesting-depth guard bypass](https://junglewise.ai/threats/cve-2026-13506-bouncy-castle-asn-1-sequence-nesting-depth-guard-bypass) (high, CVSS 7.5, published 3 Aug 2026) - [CVE-2026-59639: Bouncy Castle for Java CMS signature verification bypass](https://junglewise.ai/threats/cve-2026-59639-bouncy-castle-for-java-cms-signature-verification-bypass) (high, CVSS 7.5, published 3 Aug 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 11 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 10 | 0 | 0 | | 5 Oct 2026 | 1 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Bouncy Castle technologies - [Bouncy Castle for Java](https://junglewise.ai/threats/technologies/bouncy-castle-for-java): 21 vulnerabilities - [Bouncy Castle for Java FIPS](https://junglewise.ai/threats/technologies/bouncy-castle-for-java-fips): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Bouncy Castle vulnerabilities", https://junglewise.ai/threats/vendors/bouncy-castle, 9 November 2026.