PT-2026-33032 · Bc-Java · Bc-Java

Sunwoo Lee · Published 2026-04-15 · Updated 2026-05-21 · CVE-2026-5598

Positive Technologies (AI Summary)

CVSS v4.0

8.9

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red

Name of the Vulnerable Software and Affected Versions BC-JAVA versions 1.71 through 1.83

Description A covert timing channel exists in the BC-JAVA core modules, specifically associated with the program files FrodoEngine.Java. A covert timing channel is a method of transferring information from one process to another by manipulating the timing of events.

Recommendations Update to version 1.84.

Exploit

Fix

Weakness Enumeration

CWE-385

Related Identifiers

CLEANSTART-2026-PK73499

CLEANSTART-2026-PO27799

CLEANSTART-2026-VJ37814

CVE-2026-5598

GHSA-P93R-85WP-75V3

OPENSUSE-SU-2026:10571-1

RHSA-2026:12267

Affected Products

Bc-Java

References · 101

• 🔥 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998 · Exploit
• 🔥 https://github.com/bcgit/bc-java/wiki/CVE-2026-5598 · Exploit
• 🔥 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598 · Exploit
• https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87 · Patch
• https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5598 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5598 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42580 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42578 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-12159 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33871 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42584 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33870 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42198 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-5598 · Vendor Advisory