CVE-2026-59640 | Legion of the Bouncy Castle Bouncy Castle for Java up to 2.1.12 OpenPGP security check

August 3, 2026 Yanac

A vulnerability was found in Legion of the Bouncy Castle Bouncy Castle for Java, Bouncy Castle for Java LTS and Bouncy Castle for Java FIPS up to 1.84/2.73.11/1.0.12/2.0.12/2.1.12. It has been classified as critical. The impacted element is an unknown function of the component OpenPGP. Performing a manipulation results in security check for standard.

This vulnerability is known as CVE-2026-59640. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More