CVE-2026-63577 | Legion of the Bouncy Castle bc-csharp up to 2.6.x DirectoryName Name-Constraint Check PkixNameConstraintValidator.WithinDNSubtree certificate validation

October 2, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Legion of the Bouncy Castle bc-csharp up to 2.6.x. This affects the function PkixNameConstraintValidator.WithinDNSubtree of the component DirectoryName Name-Constraint Check. Executing a manipulation can lead to improper certificate validation.

This vulnerability appears as CVE-2026-63577. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More