Security Advisory

CVE-2026-59643

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-03 00:51:55
Last updated 2026-08-03 13:28:03
Assigner bcorg
CVSS score not scored
State PUBLISHED

Description

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.