CVE-2026-16000 | Legion of the Bouncy Castle bc-csharp up to 2.6.x CCM mode implementation KCcmBlockCipher flags missing encryption

October 2, 2026 Yanac

A vulnerability classified as problematic was found in Legion of the Bouncy Castle bc-csharp up to 2.6.x. Affected is the function KCcmBlockCipher of the component CCM mode implementation. Executing a manipulation of the argument flags can lead to missing encryption of sensitive data.

This vulnerability is tracked as CVE-2026-16000. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More