CVE-2026-71884 | Legion of the Bouncy Castle Bouncy Castle for Java up to 2.73.12 Native One-Shot CTR Packet Cipher input validation

October 9, 2026 Yanac

A vulnerability, which was classified as critical, was found in Legion of the Bouncy Castle Bouncy Castle for Java up to 2.73.12. The impacted element is an unknown function of the component Native One-Shot CTR Packet Cipher. Executing a manipulation can lead to improper input validation.

The identification of this vulnerability is CVE-2026-71884. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More