CVE-2026-63567 | Legion of the Bouncy Castle bc-csharp up to 2.6.x Block Cipher Mode IesEngine.DecryptBlock information exposure

October 2, 2026 Yanac

A vulnerability classified as problematic has been found in Legion of the Bouncy Castle bc-csharp up to 2.6.x. The affected element is the function IesEngine.DecryptBlock of the component Block Cipher Mode. This manipulation causes information exposure through error message.

This vulnerability is tracked as CVE-2026-63567. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More