Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-59643 OpenPGP Inline-Signature Policy Failure in Bouncy Castle for Java Before 1.85 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-59643
Post summary
The entry references CVE-2026-59643, noting an OpenPGP inline‑signature policy failure in Bouncy Castle for Java version 1.84 and earlier, but provides no proof‑of‑concept, exploit code, active‑exploitation evidence, or patch details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bouncycastle | bc-java | - | - | - |
| App | bouncycastle | bcpg-fips | - | - | - |