CVE-2026-71885: Identity Binding Failure in Bouncy Castle CVE-2026-71885, a critical vulnerability (CVSS 9.2) in Bouncy Castle for Java versions prior to 1.86, was disclosed on October 3, 2026. The ...
Bouncy Castle is a collection of cryptographic APIs for Java and C#, but it was recently reported that some of the Bouncy Castle keystore files are vulnerable to hash collisions, which enable ...