CVE-2026-71891 | Legion of the Bouncy Castle Bouncy Castle Java up to 1.85 BLS12-381 Key Validation BLS12_381BasicScheme.keyValidate signature verification

October 3, 2026 Yanac

A vulnerability was found in Legion of the Bouncy Castle Bouncy Castle Java up to 1.85. It has been rated as critical. The impacted element is the function BLS12_381BasicScheme.keyValidate of the component BLS12-381 Key Validation. Performing a manipulation results in improper verification of cryptographic signature.

This vulnerability was named CVE-2026-71891. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More