PT-2026-67229 · Legion Of The Bouncy Castle · Bc-Fja+2

CVE-2026-58062 · Publicado 2026-08-03 · Atualizado 2026-08-03

Mitre

CVSS v4.0

9.3

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

Exploit

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2026-58062

Produtos afetados

Bc-Fja

Bc-Java

Bc-Lts-Java

Referências · 3

• 🔥 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058062 · Exploit
• https://github.com/bcgit/bc-java/commit/add5f822660f3b2c29fd824e2f4095469c42a1c7 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-58062 · Nota de Segurança