Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-8763US | critical9.1 | — | ||
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/bcgit/bc-javaPACKAGE
- https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558WEB
- https://github.com/bcgit/bc-java/releases/tag/r1rv85v2WEB
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763WEB
- https://github.com/bcgit/bc-java/wiki/CVE-2026-8763WEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-8763ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan