Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-8763US | critical9.1 | — | ||
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/bcgit/bc-javaPACKAGE
- https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558WEB
- https://github.com/bcgit/bc-java/releases/tag/r1rv85v2WEB
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763WEB
- https://github.com/bcgit/bc-java/wiki/CVE-2026-8763WEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-8763ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan