CVE-2026-59652

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.

Score

CVSS 4.0 6.9 Medium

Status

Analyzed - 91579145-5d7b-4cc5-b925-a0262ff19630

Published

2026-08-03

Last modified

2026-10-23

Weaknesses

CWE-90

Affected products

• Bc-java (Bouncycastle)
• Bc-java (Legion Of The Bouncy Castle Inc.)

References

• https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059652
• https://github.com/bcgit/bc-java/commit/27c468af54ee6c6af87eab5a3a8468dce17e24a0