PT-2026-67243

CVE-2026-59650

·

Published

2026-08-03

·

Updated

2026-10-08

Description by

CVSS 4.0
9.3
Critical
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber
Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12
Description The MTI/A0 DH agreement exponentiates an unvalidated peer value. Diffie-Hellman (DH) is a method of securely exchanging cryptographic keys over a public channel.
Recommendations Update Bouncy Castle for Java to version 1.85 or later. Update Bouncy Castle for Java LTS to version 2.73.12 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2026-59650
CLEANSTART-2026-AM39668
CLEANSTART-2026-CL03013
CLEANSTART-2026-FL87862
CLEANSTART-2026-FR63847
CLEANSTART-2026-JY79008
CLEANSTART-2026-QP89146
CLEANSTART-2026-RT52514
CLEANSTART-2026-SJ44900
CLEANSTART-2026-XR16357
OPENSUSE-SU-2026:11445-1
OPENSUSE-SU-2026:21538-1
SUSE-SU-2026:23127-1
SUSE-SU-2026:23150-1
SUSE-SU-2026:3559-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com