CVE-2026-59647 | Legion of the Bouncy Castle up to 2.1.11 CRMF/CMP Password-MAC iteration

A vulnerability marked as problematic has been reported in Legion of the Bouncy Castle Bouncy Castle up to 1.84/2.73.11/1.0.11/2.0.11/2.1.11. This affects an unknown part of the component CRMF/CMP Password-MAC. Performing a manipulation results in excessive iteration.

This vulnerability is identified as CVE-2026-59647. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More