PT-2026-33032 · Bc-Java · Bc-Java

Sunwoo Lee · CVE-2026-5598 · Published 2026-04-15 · Updated 2026-07-17

Positive Technologies (AI Summary)

CVSS v4.0

8.9

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red

Name of the Vulnerable Software and Affected Versions BC-JAVA versions 1.71 through 1.83

Description A covert timing channel exists in the BC-JAVA core modules, specifically associated with the program files FrodoEngine.Java. A covert timing channel is a method of transferring information from one process to another by manipulating the timing of events.

Recommendations Update to version 1.84.

Exploit

Fix

Weakness Enumeration

CWE-385

Related Identifiers

CLEANSTART-2026-MT41286

CLEANSTART-2026-PK73499

CLEANSTART-2026-PO27799

CLEANSTART-2026-RU36468

CLEANSTART-2026-VJ37814

CVE-2026-5598

GHSA-P93R-85WP-75V3

OPENSUSE-SU-2026:10571-1

OPENSUSE-SU-2026:20627-1

RHSA-2026:12267

SUSE-SU-2026:1639-1

SUSE-SU-2026:21404-1

Affected Products

Bc-Java

References · 138

• 🔥 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598 · Exploit
• 🔥 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998 · Exploit
• 🔥 https://github.com/bcgit/bc-java/wiki/CVE-2026-5598 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5598.json · Exploit
• https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87 · Patch
• https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-42579 · Security Note
• https://access.redhat.com/errata/RHSA-2026:18055 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-PK73499 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-VJ37814 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-p93r-85wp-75v3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59250 · Security Note
• https://ubuntu.com/security/CVE-2026-5598 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:12267 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42578 · Security Note