[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-5588":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":146,"aliases":147,"duplicate_of":9,"upstream":149,"downstream":150,"duplicates":161,"related":162,"reserved_at":9,"published_at":166,"modified_at":167,"state":168,"summary":169,"references_raw":178,"kevs":258,"epss":259,"epss_history":262,"metrics":500,"affected":516},"CVE-2026-5588","Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All (pkix modules).\n\n This vulnerability is associated with program files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderBuilder.Java.\n\n\n\nThis issue affects BC-JAVA: from 1.67 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84; BCPKIX-FIPS: from 2.0.6 before 2.0.11, from 2.1.7 before 2.1.11; BCPIX-LTS: from 2.73.7 before 2.73.11.",null,[11,134],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-327","Use of a Broken or Risky Cryptographic Algorithm","The product uses a broken or risky cryptographic algorithm or protocol.","weakness","Draft","Class","High",[20,24,28,118,122,126,130],{"id":21,"name":22,"techniques":23},"CAPEC-20","Encryption Brute Forcing",[],{"id":25,"name":26,"techniques":27},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":29,"name":30,"techniques":31},"CAPEC-473","Signature Spoof",[32,109],{"id":33,"name":34,"tactics":35,"countermeasures":42},"T1036.001","Invalid Code Signature",[36,39],{"id":37,"name":38},"TA0030","Defense Evasion",{"id":40,"name":41},"TA0005","Stealth",[43,48,52,56,60,65,70,75,80,85,89,93,97,101,105],{"id":44,"name":45,"tactic":46},"D3-FA","File Analysis",{"name":47},"Detect",{"id":49,"name":50,"tactic":51},"D3-FIM","File Integrity Monitoring",{"name":47},{"id":53,"name":54,"tactic":55},"D3-DA","Dynamic Analysis",{"name":47},{"id":57,"name":58,"tactic":59},"D3-EFA","Emulated File Analysis",{"name":47},{"id":61,"name":62,"tactic":63},"D3-FEV","File Eviction",{"name":64},"Evict",{"id":66,"name":67,"tactic":68},"D3-DF","Decoy File",{"name":69},"Deceive",{"id":71,"name":72,"tactic":73},"D3-FE","File Encryption",{"name":74},"Harden",{"id":76,"name":77,"tactic":78},"D3-RF","Restore File",{"name":79},"Restore",{"id":81,"name":82,"tactic":83},"D3-CF","Content Filtering",{"name":84},"Isolate",{"id":86,"name":87,"tactic":88},"D3-LFP","Local File Permissions",{"name":84},{"id":90,"name":91,"tactic":92},"D3-RFAM","Remote File Access Mediation",{"name":84},{"id":94,"name":95,"tactic":96},"D3-CQ","Content Quarantine",{"name":84},{"id":98,"name":99,"tactic":100},"D3-CM","Content Modification",{"name":84},{"id":102,"name":103,"tactic":104},"D3-EAL","Executable Allowlisting",{"name":84},{"id":106,"name":107,"tactic":108},"D3-EDL","Executable Denylisting",{"name":84},{"id":110,"name":111,"tactics":112,"countermeasures":117},"T1553.002","Code Signing",[113,114],{"id":37,"name":38},{"id":115,"name":116},"TA0112","Defense Impairment",[],{"id":119,"name":120,"techniques":121},"CAPEC-475","Signature Spoofing by Improper Validation",[],{"id":123,"name":124,"techniques":125},"CAPEC-608","Cryptanalysis of Cellular Encryption",[],{"id":127,"name":128,"techniques":129},"CAPEC-614","Rooting SIM Cards",[],{"id":131,"name":132,"techniques":133},"CAPEC-97","Cryptanalysis",[],{"_key":135,"id":135,"name":136,"description":137,"type":15,"status":16,"abstraction":138,"likelihood_of_exploit":9,"capec":139},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","Base",[140,144],{"id":141,"name":142,"techniques":143},"CAPEC-463","Padding Oracle Crypto Attack",[],{"id":119,"name":120,"techniques":145},[],[],[148],"GHSA-wg6q-6289-32hp",[],[151,153,155,157,159],{"_key":152},"OPENSUSE-SU-2026:10571-1",{"_key":154},"DEBIAN-CVE-2026-5588",{"_key":156},"UBUNTU-CVE-2026-5588",{"_key":158},"RHSA-2026:18054",{"_key":160},"RHSA-2026:18055",[],[163,164],{"_key":152},{"_key":165},"CGA-X825-VHRP-PX34","2026-04-15T09:06:15.617Z","2026-07-16T12:04:42.197Z","Awaiting Analysis",{"cisa_kev":170,"cisa_ransomware":170,"cisa_vendor":9,"epss_severity":171,"epss_score":172,"severity":173,"severity_score":174,"severity_version":175,"severity_source":176,"severity_vector":177,"severity_status":168},false,"low",0.00392,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",[179,187,192,197,202,208,213,218,222,226,230,234,238,242,246,250,254],{"url":180,"sources":181,"tags":184},"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588",[176,182,183],"nvd","osv_maven",[185,186],"WEB","Vendor Advisory",{"url":188,"sources":189,"tags":190},"https://nvd.nist.gov/vuln/detail/CVE-2026-5588",[183],[191],"Advisory",{"url":193,"sources":194,"tags":195},"https://github.com/bcgit/bc-java/commit/656bae0dbd9b1521f840521ff786e78749fe3057",[183,176,182],[185,196],"Patch",{"url":198,"sources":199,"tags":200},"https://github.com/bcgit/bc-java",[183],[201],"PACKAGE",{"url":203,"sources":204,"tags":205},"https://access.redhat.com/security/cve/CVE-2026-5588",[176],[206,207],"VDB Entry","X Refsource REDHAT",{"url":209,"sources":210,"tags":211},"https://bugzilla.redhat.com/show_bug.cgi?id=2458634",[176],[212,207],"Issue Tracking",{"url":214,"sources":215,"tags":216},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5588.json",[176],[217],"X Sadp Csaf Vex",{"url":219,"sources":220,"tags":221},"https://access.redhat.com/errata/RHSA-2026:18054",[176],[186,207],{"url":223,"sources":224,"tags":225},"https://access.redhat.com/errata/RHSA-2026:18055",[176],[186,207],{"url":227,"sources":228,"tags":229},"https://access.redhat.com/errata/RHSA-2026:14276",[176],[186,207],{"url":231,"sources":232,"tags":233},"https://access.redhat.com/errata/RHSA-2026:14272",[176],[186,207],{"url":235,"sources":236,"tags":237},"https://access.redhat.com/errata/RHSA-2026:13631",[176],[186,207],{"url":239,"sources":240,"tags":241},"https://access.redhat.com/errata/RHSA-2026:18059",[176],[186,207],{"url":243,"sources":244,"tags":245},"https://access.redhat.com/errata/RHSA-2026:21772",[176],[186,207],{"url":247,"sources":248,"tags":249},"https://access.redhat.com/errata/RHSA-2026:17668",[176],[186,207],{"url":251,"sources":252,"tags":253},"https://access.redhat.com/errata/RHSA-2026:11720",[176],[186,207],{"url":255,"sources":256,"tags":257},"https://access.redhat.com/errata/RHSA-2026:11721",[176],[186,207],[],{"date":260,"score":172,"percentile":261},"2026-07-05",0.3115,[263,267,270,273,276,279,282,286,289,292,295,298,301,304,306,309,312,315,317,319,321,323,326,329,332,335,337,339,342,345,348,351,353,357,360,363,366,369,372,375,378,381,384,387,390,393,396,399,402,405,408,410,413,416,419,422,425,428,430,433,435,438,442,445,448,451,454,457,460,463,466,469,472,475,478,481,484,487,490,493,496,499],{"date":264,"score":265,"percentile":266},"2026-04-15",0.00029,0.08208,{"date":268,"score":265,"percentile":269},"2026-04-16",0.08211,{"date":271,"score":265,"percentile":272},"2026-04-17",0.08201,{"date":274,"score":265,"percentile":275},"2026-04-18",0.08199,{"date":277,"score":265,"percentile":278},"2026-04-19",0.08181,{"date":280,"score":265,"percentile":281},"2026-04-20",0.08171,{"date":283,"score":284,"percentile":285},"2026-04-21",0.00012,0.01714,{"date":287,"score":284,"percentile":288},"2026-04-22",0.01715,{"date":290,"score":284,"percentile":291},"2026-04-23",0.01727,{"date":293,"score":284,"percentile":294},"2026-04-24",0.01722,{"date":296,"score":284,"percentile":297},"2026-04-25",0.0172,{"date":299,"score":284,"percentile":300},"2026-04-26",0.01716,{"date":302,"score":284,"percentile":303},"2026-04-27",0.01739,{"date":305,"score":284,"percentile":303},"2026-04-28",{"date":307,"score":284,"percentile":308},"2026-04-29",0.01753,{"date":310,"score":284,"percentile":311},"2026-04-30",0.01732,{"date":313,"score":284,"percentile":314},"2026-05-01",0.01731,{"date":316,"score":284,"percentile":300},"2026-05-02",{"date":318,"score":284,"percentile":300},"2026-05-03",{"date":320,"score":284,"percentile":285},"2026-05-04",{"date":322,"score":284,"percentile":300},"2026-05-05",{"date":324,"score":284,"percentile":325},"2026-05-06",0.01704,{"date":327,"score":284,"percentile":328},"2026-05-07",0.01707,{"date":330,"score":284,"percentile":331},"2026-05-08",0.01706,{"date":333,"score":284,"percentile":334},"2026-05-09",0.01713,{"date":336,"score":284,"percentile":288},"2026-05-10",{"date":338,"score":284,"percentile":288},"2026-05-11",{"date":340,"score":284,"percentile":341},"2026-05-12",0.01702,{"date":343,"score":284,"percentile":344},"2026-05-13",0.01709,{"date":346,"score":284,"percentile":347},"2026-05-14",0.01712,{"date":349,"score":284,"percentile":350},"2026-05-15",0.01711,{"date":352,"score":284,"percentile":344},"2026-05-16",{"date":354,"score":355,"percentile":356},"2026-05-17",0.00013,0.0211,{"date":358,"score":355,"percentile":359},"2026-05-18",0.02094,{"date":361,"score":355,"percentile":362},"2026-05-19",0.02081,{"date":364,"score":355,"percentile":365},"2026-05-20",0.02074,{"date":367,"score":355,"percentile":368},"2026-05-21",0.02061,{"date":370,"score":355,"percentile":371},"2026-05-22",0.022,{"date":373,"score":355,"percentile":374},"2026-05-23",0.02195,{"date":376,"score":355,"percentile":377},"2026-05-24",0.02187,{"date":379,"score":355,"percentile":380},"2026-05-25",0.02177,{"date":382,"score":355,"percentile":383},"2026-05-26",0.02163,{"date":385,"score":355,"percentile":386},"2026-05-27",0.0218,{"date":388,"score":355,"percentile":389},"2026-05-28",0.02173,{"date":391,"score":355,"percentile":392},"2026-05-29",0.02183,{"date":394,"score":355,"percentile":395},"2026-05-30",0.02204,{"date":397,"score":355,"percentile":398},"2026-05-31",0.02198,{"date":400,"score":355,"percentile":401},"2026-06-01",0.02188,{"date":403,"score":355,"percentile":404},"2026-06-02",0.02178,{"date":406,"score":355,"percentile":407},"2026-06-03",0.02159,{"date":409,"score":355,"percentile":407},"2026-06-04",{"date":411,"score":355,"percentile":412},"2026-06-05",0.02175,{"date":414,"score":355,"percentile":415},"2026-06-06",0.02181,{"date":417,"score":355,"percentile":418},"2026-06-07",0.02162,{"date":420,"score":355,"percentile":421},"2026-06-08",0.02149,{"date":423,"score":355,"percentile":424},"2026-06-09",0.02137,{"date":426,"score":355,"percentile":427},"2026-06-10",0.02139,{"date":429,"score":355,"percentile":424},"2026-06-11",{"date":431,"score":355,"percentile":432},"2026-06-12",0.02141,{"date":434,"score":355,"percentile":424},"2026-06-13",{"date":436,"score":355,"percentile":437},"2026-06-14",0.02147,{"date":439,"score":440,"percentile":441},"2026-06-15",0.00259,0.17034,{"date":443,"score":440,"percentile":444},"2026-06-16",0.17056,{"date":446,"score":440,"percentile":447},"2026-06-17",0.17064,{"date":449,"score":440,"percentile":450},"2026-06-18",0.17079,{"date":452,"score":440,"percentile":453},"2026-06-19",0.17065,{"date":455,"score":440,"percentile":456},"2026-06-20",0.17053,{"date":458,"score":440,"percentile":459},"2026-06-21",0.17043,{"date":461,"score":440,"percentile":462},"2026-06-22",0.17025,{"date":464,"score":440,"percentile":465},"2026-06-23",0.17067,{"date":467,"score":440,"percentile":468},"2026-06-24",0.17094,{"date":470,"score":440,"percentile":471},"2026-06-25",0.17188,{"date":473,"score":440,"percentile":474},"2026-06-26",0.17221,{"date":476,"score":440,"percentile":477},"2026-06-27",0.17257,{"date":479,"score":440,"percentile":480},"2026-06-28",0.17219,{"date":482,"score":440,"percentile":483},"2026-06-29",0.17211,{"date":485,"score":172,"percentile":486},"2026-06-30",0.30984,{"date":488,"score":172,"percentile":489},"2026-07-01",0.31088,{"date":491,"score":172,"percentile":492},"2026-07-02",0.31117,{"date":494,"score":172,"percentile":495},"2026-07-03",0.31135,{"date":497,"score":172,"percentile":498},"2026-07-04",0.31138,{"date":260,"score":172,"percentile":261},[501,510,513],{"source":176,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":502,"cvss_v4_0":506},{"baseScore":174,"baseSeverity":503,"vectorString":177,"impactScore":504,"exploitabilityScore":505},"HIGH",6,10,{"baseScore":507,"baseSeverity":508,"vectorString":509,"impactScore":9,"exploitabilityScore":9},6.3,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/U:Amber",{"source":182,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":511},{"baseScore":507,"baseSeverity":508,"vectorString":512,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber",{"source":183,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":514},{"baseScore":507,"baseSeverity":9,"vectorString":515,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/U:Green",[517,543,551,563,573,578,583,588,593,598],{"ecosystem":9,"name":518,"vendor":519,"product":520,"cpe_part":521,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":522},"BC-JAVA","legion of the bouncy castle inc.","bc-java","a",[523,530,533,536,540],{"version":524,"is_range":525,"range_type":176,"version_start":526,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9},">= 1.49, \u003C 1.84",true,"1.49","including","1.84","excluding",{"version":531,"is_range":525,"range_type":176,"version_start":532,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9},">= 1.67, \u003C 1.84","1.67",{"version":534,"is_range":525,"range_type":176,"version_start":532,"version_start_type":527,"version_end":535,"version_end_type":529,"fixed_in":9},">= 1.67, \u003C 1.80.2","1.80.2",{"version":537,"is_range":525,"range_type":176,"version_start":538,"version_start_type":527,"version_end":539,"version_end_type":529,"fixed_in":9},">= 1.81, \u003C 1.81.1","1.81","1.81.1",{"version":541,"is_range":525,"range_type":176,"version_start":542,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9},">= 1.82, \u003C 1.84","1.82",{"ecosystem":9,"name":544,"vendor":519,"product":545,"cpe_part":521,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":546},"BCPIX-LTS","bcpix-lts",[547],{"version":548,"is_range":525,"range_type":176,"version_start":549,"version_start_type":527,"version_end":550,"version_end_type":529,"fixed_in":9},">= 2.73.7, \u003C 2.73.11","2.73.7","2.73.11",{"ecosystem":9,"name":552,"vendor":519,"product":553,"cpe_part":521,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":554},"BCPKIX-FIPS","bcpkix-fips",[555,559],{"version":556,"is_range":525,"range_type":176,"version_start":557,"version_start_type":527,"version_end":558,"version_end_type":529,"fixed_in":9},">= 2.0.6, \u003C 2.0.11","2.0.6","2.0.11",{"version":560,"is_range":525,"range_type":176,"version_start":561,"version_start_type":527,"version_end":562,"version_end_type":529,"fixed_in":9},">= 2.1.7, \u003C 2.1.11","2.1.7","2.1.11",{"ecosystem":564,"name":565,"vendor":566,"product":567,"cpe_part":9,"purl_type":568,"purl_namespace":566,"purl_name":567,"source":9,"versions":569},"Maven","org.bouncycastle:bcpkix-debug-jdk14","org.bouncycastle","bcpkix-debug-jdk14","maven",[570],{"version":571,"is_range":525,"range_type":572,"version_start":526,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9},"gte1_49_lt1_84","ecosystem",{"ecosystem":564,"name":574,"vendor":566,"product":575,"cpe_part":9,"purl_type":568,"purl_namespace":566,"purl_name":575,"source":9,"versions":576},"org.bouncycastle:bcpkix-debug-jdk15to18","bcpkix-debug-jdk15to18",[577],{"version":571,"is_range":525,"range_type":572,"version_start":526,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9},{"ecosystem":564,"name":579,"vendor":566,"product":580,"cpe_part":9,"purl_type":568,"purl_namespace":566,"purl_name":580,"source":9,"versions":581},"org.bouncycastle:bcpkix-debug-jdk18on","bcpkix-debug-jdk18on",[582],{"version":571,"is_range":525,"range_type":572,"version_start":526,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9},{"ecosystem":564,"name":584,"vendor":566,"product":585,"cpe_part":9,"purl_type":568,"purl_namespace":566,"purl_name":585,"source":9,"versions":586},"org.bouncycastle:bcpkix-jdk14","bcpkix-jdk14",[587],{"version":571,"is_range":525,"range_type":572,"version_start":526,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9},{"ecosystem":564,"name":589,"vendor":566,"product":590,"cpe_part":9,"purl_type":568,"purl_namespace":566,"purl_name":590,"source":9,"versions":591},"org.bouncycastle:bcpkix-jdk15on","bcpkix-jdk15on",[592],{"version":571,"is_range":525,"range_type":572,"version_start":526,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9},{"ecosystem":564,"name":594,"vendor":566,"product":595,"cpe_part":9,"purl_type":568,"purl_namespace":566,"purl_name":595,"source":9,"versions":596},"org.bouncycastle:bcpkix-jdk15to18","bcpkix-jdk15to18",[597],{"version":571,"is_range":525,"range_type":572,"version_start":526,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9},{"ecosystem":564,"name":599,"vendor":566,"product":600,"cpe_part":9,"purl_type":568,"purl_namespace":566,"purl_name":600,"source":9,"versions":601},"org.bouncycastle:bcpkix-jdk18on","bcpkix-jdk18on",[602],{"version":571,"is_range":525,"range_type":572,"version_start":526,"version_start_type":527,"version_end":528,"version_end_type":529,"fixed_in":9}]