MEDIUM 6.5 Maven
Bouncy Castle has an LDAP injection
GHSA-c3fc-8qff-9hwx · CVE-2026-0636
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper.
Issue affecting: BC 1.74 to 1.80.1, BC 1.81, BC 1.82 to BC 1.83.
Fixed versions: BC 1.80.2, BC 1.81.1, BC 1.84
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-0636
- WEB https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde
- WEB https://access.redhat.com/errata/RHSA-2026:11720
- WEB https://access.redhat.com/errata/RHSA-2026:60248
- WEB https://access.redhat.com/errata/RHSA-2026:60249
- WEB https://access.redhat.com/errata/RHSA-2026:60250
- WEB https://access.redhat.com/errata/RHSA-2026:60251
- WEB https://access.redhat.com/errata/RHSA-2026:60252
- WEB https://access.redhat.com/errata/RHSA-2026:60254
- WEB https://access.redhat.com/errata/RHSA-2026:60256
- WEB https://access.redhat.com/errata/RHSA-2026:60259
- WEB https://access.redhat.com/errata/RHSA-2026:66488
- WEB https://access.redhat.com/security/cve/CVE-2026-0636
- WEB https://bugzilla.redhat.com/show_bug.cgi?id=2458641
- PACKAGE https://github.com/bcgit/bc-java
- WEB https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636
- WEB https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0636.json
- WEB https://access.redhat.com/errata/RHSA-2026:11721
- WEB https://access.redhat.com/errata/RHSA-2026:13631
- WEB https://access.redhat.com/errata/RHSA-2026:14272
- WEB https://access.redhat.com/errata/RHSA-2026:14276
- WEB https://access.redhat.com/errata/RHSA-2026:17668
- WEB https://access.redhat.com/errata/RHSA-2026:18054
- WEB https://access.redhat.com/errata/RHSA-2026:18055
- WEB https://access.redhat.com/errata/RHSA-2026:18059
- WEB https://access.redhat.com/errata/RHSA-2026:21772
- WEB https://access.redhat.com/errata/RHSA-2026:53644
- WEB https://access.redhat.com/errata/RHSA-2026:53645
- WEB https://access.redhat.com/errata/RHSA-2026:53646
- WEB https://access.redhat.com/errata/RHSA-2026:53806
- WEB https://access.redhat.com/errata/RHSA-2026:60239
- WEB https://access.redhat.com/errata/RHSA-2026:60246
- WEB https://access.redhat.com/errata/RHSA-2026:60247
Ready to move
Start Securing
Free, no credit card | First findings in minutes