CVE-2020-26939

CVE-2020-26939 is a medium-severity information disclosure vulnerability affecting Legion of the Bouncy Castle (BC) before 1.61 and BC-FJA before 1.0.1.2. Attackers can exploit observable differences in error handling within the OAEP decoder to potentially leak sensitive information about an RSA private key's exponent. The attack vector is network-based with low complexity, requiring no user interaction, and could lead to a partial compromise of confidentiality. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.