CVE-2026-0636

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-90

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-12: 110-12
Referenced assets1 URL
Full discourse1 post
  • DailyCVE@dailycve

    🔴 Bouncy Castle, Cryptographic Implementation Flaw, #CVE-2026-0636 (Critical) -DC-Oct2026-3116 https://dailycve.com/bouncy-castle-cryptographic-implementation-flaw-cve-2026-0636-critical-dc-oct2026-3116/

    0000027
    241 followersView on X

Explore more