CVE-2026-5588: Legion Of The Bouncy Castle Inc Bc-Java

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All (pkix modules). This vulnerability is associated with program files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderBuilder.Java. This issue affects BC-JAVA: from 1.67 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84; BCPKIX-FIPS: from 2.0.6 before 2.0.11, from 2.1.7 before 2.1.11; BCPIX-LTS: from 2.73.7 before 2.73.11.

Affected products

Legion Of The Bouncy Castle Inc Bc-Java: from 1.67, before 1.80.2 (fixed in 1.80.2); from 1.81, before 1.81.1 (fixed in 1.81.1); from 1.82, before 1.84 (fixed in 1.84)
Legion Of The Bouncy Castle Inc Bcpix-LTS: from 2.73.7, before 2.73.11 (fixed in 2.73.11)
Legion Of The Bouncy Castle Inc Bcpkix-Fips: from 2.0.6, before 2.0.11 (fixed in 2.0.11); from 2.1.7, before 2.1.11 (fixed in 2.1.11)
Red Hat Cryostat 4
Red Hat Openshift Developer Tools And Services
Red Hat Openshift Developer Tools And Services 4.12: before 1786628667 (fixed in 1786628667)
Red Hat Openshift Developer Tools And Services 4.13: before 1786628681 (fixed in 1786628681)
Red Hat Openshift Developer Tools And Services 4.14: before 1786533561 (fixed in 1786533561)
Red Hat Openshift Developer Tools And Services 4.15: before 1786533565 (fixed in 1786533565)
Red Hat Openshift Developer Tools And Services 4.16: before 1787125166 (fixed in 1787125166)
Red Hat Openshift Developer Tools And Services 4.17: before 1787124635 (fixed in 1787124635)
Red Hat Openshift Developer Tools And Services 4.18: before 1787125069 (fixed in 1787125069)
Red Hat Openshift Developer Tools And Services 4.19: before 1787124632 (fixed in 1787124632)
Red Hat Openshift Developer Tools And Services 4.20: before 1787124925 (fixed in 1787124925)
Red Hat Openshift Developer Tools And Services 4.21: before 1787125311 (fixed in 1787125311)
Red Hat Openshift Developer Tools And Services 4.22: before 1787124779 (fixed in 1787124779)
Red Hat Red Hat Amq Broker 7
Red Hat Red Hat Amq Broker 7.12.7
Red Hat Red Hat Amq Broker 7.13.5
Red Hat Red Hat Amq Broker 7.14.1
Red Hat Red Hat Build Of Apache Camel 4.14 For Quarkus 3.27
Red Hat Red Hat Build Of Apache Camel 4.18.1 For Spring Boot 3.5.14
Red Hat Red Hat Build Of Apache Camel 4 For Quarkus 3
Red Hat Red Hat Build Of Apicurio Registry 3
Red Hat Red Hat Build Of Debezium 3
and 21 more

Published 2026-04-15. Last modified 2026-09-18.