CVE-2026-71892 | Legion of the Bouncy Castle BC-JAVA/BC-FJA Key Size Validation JceKeyTransRecipient.java comparison

October 3, 2026 Yanac

A vulnerability was found in Legion of the Bouncy Castle BC-JAVA and BC-FJA and classified as critical. This issue affects the function org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidation of the file bouncycastle/cms/jcajce/JceKeyTransRecipient.java of the component Key Size Validation. The manipulation results in incorrect comparison.

This vulnerability is known as CVE-2026-71892. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More