CVSS 4.0
9.3 criticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:AmberCVE-2026-8763
Critical (9.3) in bouncycastle. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in org.bouncycastle:bc-fips 1.0.2.7, 2.0.2, 2.1.3.
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
Severity
CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
- CWE
- CWE-295
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bouncycastle:bc-java
- bouncycastle:bouncy_castle_for_java_lts
- bouncycastle:fips_java_api
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9pwp-9qqc-pr26 | Maven | org.bouncycastle:bc-fips | <1.0.2.7 | 1.0.2.7 |
| GHSA-9pwp-9qqc-pr26 | Maven | org.bouncycastle:bc-fips | >=2.0.0 <2.0.2 | 2.0.2 |
| GHSA-9pwp-9qqc-pr26 | Maven | org.bouncycastle:bc-fips | >=2.1.0 <2.1.3 | 2.1.3 |
| GHSA-9pwp-9qqc-pr26 | Maven | org.bouncycastle:bcprov-jdk18on | <1.85 | 1.85 |
| GHSA-9pwp-9qqc-pr26 | Maven | org.bouncycastle:bcprov-lts8on | <2.73.12 | 2.73.12 |
| GHSA-9pwp-9qqc-pr26 | Maven | org.bouncycastle:bcprov-jdk15to18 | <1.85 | 1.85 |