CVE-2026-0636: Legion Of The Bouncy Castle Inc Bc-Java

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Affected products

  • Legion Of The Bouncy Castle Inc Bc-Java: from 1.74, before 1.80.2 (fixed in 1.80.2); from 1.81, before 1.81.1 (fixed in 1.81.1); from 1.82, before 1.84 (fixed in 1.84)
  • Red Hat Cryostat 4
  • Red Hat Openshift Developer Tools And Services
  • Red Hat Openshift Developer Tools And Services 4.12: before 1786628667 (fixed in 1786628667)
  • Red Hat Openshift Developer Tools And Services 4.13: before 1786628681 (fixed in 1786628681)
  • Red Hat Openshift Developer Tools And Services 4.14: before 1786533561 (fixed in 1786533561)
  • Red Hat Openshift Developer Tools And Services 4.15: before 1786533565 (fixed in 1786533565)
  • Red Hat Openshift Developer Tools And Services 4.16: before 1787125166 (fixed in 1787125166)
  • Red Hat Openshift Developer Tools And Services 4.17: before 1787124635 (fixed in 1787124635)
  • Red Hat Openshift Developer Tools And Services 4.18: before 1787125069 (fixed in 1787125069)
  • Red Hat Openshift Developer Tools And Services 4.19: before 1787124632 (fixed in 1787124632)
  • Red Hat Openshift Developer Tools And Services 4.20: before 1787124925 (fixed in 1787124925)
  • Red Hat Openshift Developer Tools And Services 4.21: before 1787125311 (fixed in 1787125311)
  • Red Hat Openshift Developer Tools And Services 4.22: before 1787124779 (fixed in 1787124779)
  • Red Hat Red Hat Amq Broker 7
  • Red Hat Red Hat Amq Broker 7.12.7
  • Red Hat Red Hat Amq Broker 7.13.5
  • Red Hat Red Hat Amq Broker 7.14.1
  • Red Hat Red Hat Amq Clients
  • Red Hat Red Hat Build Of Apache Camel 4.14 For Quarkus 3.27
  • Red Hat Red Hat Build Of Apache Camel 4.18.1 For Spring Boot 3.5.14
  • Red Hat Red Hat Build Of Apache Camel 4 For Quarkus 3
  • Red Hat Red Hat Build Of Apicurio Registry 3
  • Red Hat Red Hat Build Of Debezium 3
  • Red Hat Red Hat Build Of Quarkus 3.20.6.sp1
  • and 20 more

Published 2026-04-15. Last modified 2026-09-18.