CVE-2026-59650

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-59650
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-59650.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-59650
Downstream
CGA (16)
CLEANSTART (12)
DEBIAN (1)
openSUSE (2)
SUSE (3)
UBUNTU (1)
Related
openSUSE (2)
SUSE (3)
Published
2026-08-03T00:42:46Z
Modified
2026-10-16T08:49:27Z
Severity
  • 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber CVSS Calculator
Summary
MTI/A0 DH agreement exponentiates unvalidated peer value
Details

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

Database specific 
{
    "cna_assigner":  "bcorg",
    "cwe_ids":  [
        "CWE-20"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59650.json"
}
References

Affected packages

Git / github.com/bcgit/bc-java

Affected ranges

Type
GIT
Repo
https://github.com/bcgit/bc-java
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
57fbd3c501f7a369f64eda311d6a709fc0bcae84
Fixed
daeaae9d7075d04f40812e68671ebf4c777b5148
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "1.85"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "daeaae9d7075d04f40812e68671ebf4c777b5148"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}
Type
GIT
Repo
https://github.com/bcgit/bc-lts-java
Events
Introduced
468b5082f3f0971e80bf9edb7029c17b39b9ba0c
Fixed
f101b232c5d3e07ecdd504210a57e43831d6cd65
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "2.73.0"
                },
                {
                    "fixed":  "2.73.12"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "cpe":  "cpe:2.3:a:bouncycastle:bouncy_castle_for_java_lts:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "2.73.11"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

Other
r1rv73
r1rv74
r1rv75
r1rv76
r1rv77
r1rv78
r1rv80
r1rv81
r1rv82
r1rv83
r1rv84
r2rv73dot0
r2rv73dot1
r2rv73dot10
r2rv73dot11
r2rv73dot3
r2rv73dot4
r2rv73dot6
r2rv73dot8
r2rv73dot9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-59650.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "15458665382500294967819572709069610729",
            "length":  1499
        },
        "id":  "CVE-2026-59650-c8dd9437",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/bcgit/bc-java/commit/daeaae9d7075d04f40812e68671ebf4c777b5148",
        "target":  {
            "file":  "core/src/test/java/org/bouncycastle/crypto/test/DHTest.java",
            "function":  "performTest"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "39837229199252067709863267428376564493",
                "89056948157061883310803270858058668336",
                "98411027682919515017005145550953223550",
                "68609166975825839622195483804635438532",
                "97465306179402342352019293947987888651",
                "174446942765070382252366940398412439069",
                "179180798686791180524949814342786605442",
                "132032706204184555523655794045681315998",
                "217457557378545958920564931163998102709",
                "106139185827831722010841543987112865630",
                "324251246715430604868198576214846890368",
                "10024155742309374045783853878627013864",
                "65464175540726300648816279084747107648",
                "106493395332007424881234845227534588094",
                "130545261436354824854125595202154121582",
                "132993737381193918075780349068224261509",
                "119966745500271011262438567101071605900",
                "209370374849919101099542497374465528633",
                "148009320301020050708507485801545556792",
                "166157124020553995644131850085312406270",
                "83304957702087655132415981670064896029",
                "38169098025588399015197051035299470143",
                "86492094171202536628882901750087590791",
                "236006963808027379320342124258333742403",
                "145421064444035213972389846627766528134",
                "209205579286270947472382170165907215349",
                "185407259899451598453312194452843096956",
                "170088055311645693780096711882901870265",
                "105394072204309227281198512899102806394",
                "252969760893965287317455560448025290872",
                "62414458308160710803745041302001662934",
                "148714700210040392342219666206895201268",
                "206918780053028883639992426682971096226",
                "276110901575714650566962312926294917303",
                "224820137487141884433983622436868570036",
                "215804546267509209630041151600005197147",
                "161374838074741889965706815960646264073",
                "89063255969657513393871253650791208268",
                "211813012524270769352283450511491380835",
                "105414480793944947940510558785717741759"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59650-d061d92e",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/bcgit/bc-java/commit/daeaae9d7075d04f40812e68671ebf4c777b5148",
        "target":  {
            "file":  "core/src/test/java/org/bouncycastle/crypto/test/DHTest.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "198002678574329065828187285859489414562",
                "219914403672327470544985569536845380476",
                "125882156613492703650776123370260850979",
                "133724903272672148906466052467860915053",
                "257430002790830794627931222844639762238",
                "333818514306417897114869158146375367857",
                "2474292478684002824468091141837582064",
                "26253479406145000584989358973190573257",
                "23402125195678913619901665254553391167",
                "265753623561889257480922840810398313993",
                "36982095808376536006783653477590153189",
                "75486295277509996368334464124285110477",
                "136132870724656348965355127926120124060",
                "86345803385075414509629375505765146304",
                "228877134448588105310854659584086457209",
                "138796134595921291187794745885110213454",
                "151255483941926800790265232073741870661",
                "102750529944100940729913550401910346931"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-59650-e2b97371",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/bcgit/bc-java/commit/daeaae9d7075d04f40812e68671ebf4c777b5148",
        "target":  {
            "file":  "core/src/main/java/org/bouncycastle/crypto/agreement/DHAgreement.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "289740810013262709615890147309962562743",
            "length":  647
        },
        "id":  "CVE-2026-59650-edb8e1ec",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/bcgit/bc-java/commit/daeaae9d7075d04f40812e68671ebf4c777b5148",
        "target":  {
            "file":  "core/src/main/java/org/bouncycastle/crypto/agreement/DHAgreement.java",
            "function":  "calculateAgreement"
        }
    }
]
vanir_signatures_modified 
"2026-10-16T08:49:27Z"