Legion of the Bouncy Castle Inc.
First CVE: Aug 12, 2025Active for: 1 year
13
CVEs Published
More CVEs Published than 31% of tracked CNAs
6.5
Avg CVEs / Year
More Avg CVEs / Year than 40% of tracked CNAs
5.3
Avg CVSS Score
Higher Avg CVSS Score than 4% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Trends Over Time
The number and severity of CVEs published by Legion of the Bouncy Castle Inc. over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 12, 2025
11 months ago
Most Recent CVE
Jul 16, 2026
8 days ago
Top CVEs
All CVEs published by Legion of the Bouncy Castle Inc. as a CNA, regardless of affected vendor or product.
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-5598HIGH Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).
This vulnerability is associated with program files FrodoEngine.Java.
| Apr 15, 2026 | 7.5 | 30 | NO | NO |
CVE-2026-5588HIGH Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIP | Apr 15, 2026 | 7.5 | 30 | NO | NO |
CVE-2025-14813HIGH : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules).
This vulnerability is associated with p | Apr 15, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-3505HIGH Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules).
This v | Apr 15, 2026 | 7.5 | 27 | NO | NO |
CVE-2026-8149MEDIUM A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX | May 8, 2026 | 5.1 | 26 | NO | NO |
CVE-2026-0636MEDIUM Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules).
This | Apr 15, 2026 | 6.5 | 26 | NO | NO |
CVE-2025-8916MEDIUM Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All (API modules), Legion of the Bouncy Castle Inc. BC Java | Aug 13, 2025 | 6.3 | 23 | NO | NO |
CVE-2025-8885MEDIUM Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA | Aug 12, 2025 | 6.3 | 22 | NO | NO |
CVE-2025-9341MEDIUM Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bounc | Aug 22, 2025 | 5.9 | 21 | NO | NO |
CVE-2025-12194MEDIUM Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bounc | Oct 24, 2025 | 5.9 | 20 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA13 CVEs
15%
46%
31%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowMediumHighNone
Attack Vector
Local5 (38.5%)
Network7 (53.8%)
Unknown0 (0.0%)
Physical1 (7.7%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (92.3%)
High1 (7.7%)
Unknown0 (0.0%)
User Interaction
None10 (76.9%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (7.7%)
High1 (7.7%)
None11 (84.6%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Legion of the Bouncy Castle Inc. as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Legion of the Bouncy Castle Inc. as a CNA — matched by CVE ID, not by organization name.