CVE-2026-63571 | Legion of the Bouncy Castle bc-csharp up to 2.6.x Attribute Certificate Path Validator PkixAttrCertPathValidator/PkixAttrCertPathBuilder data authenticity

October 2, 2026 Yanac

A vulnerability classified as critical was found in Legion of the Bouncy Castle bc-csharp up to 2.6.x. Impacted is the function PkixAttrCertPathValidator/PkixAttrCertPathBuilder of the component Attribute Certificate Path Validator. Such manipulation leads to insufficient verification of data authenticity.

This vulnerability is referenced as CVE-2026-63571. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More