CVE-2026-15999 | Legion of the Bouncy Castle bc-csharp up to 2.6.x AES-CCM Implementation ParameterUtilities.GetCipherParameters integrity check

October 2, 2026 Yanac

A vulnerability, which was classified as critical, was found in Legion of the Bouncy Castle bc-csharp up to 2.6.x. Affected by this issue is the function ParameterUtilities.GetCipherParameters of the component AES-CCM Implementation. The manipulation results in improper validation of integrity check value.

This vulnerability is cataloged as CVE-2026-15999. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More