WID-SEC-W-2026-2709

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Bouncy Castle for Java FIPS: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2026-08-09

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Bouncy Castle for Java FIPS ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-13505US——
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key material held by the AES and DESede engi…
CVE-2026-8798US——
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and R…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan