SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-59652

MEDIUM · CVSS 6.9 EPSS 0.36% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-03 · Last synced 2026-09-02

CyberRota Analysis

AI-Generated

Bouncy Castle for Java versions prior to 1.85 are vulnerable to LDAP filter injection due to flaws in the legacy jdk1.4 LDAPStoreHelper. This vulnerability could allow an attacker to manipulate LDAP queries, potentially leading to unauthorized access or data exposure. Organizations utilizing affected versions of Bouncy Castle, particularly those still relying on legacy Java environments, should prioritize remediation to mitigate potential security risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-59652
Severity
MEDIUM
CVSS
6.9
EPSS
0.36%
Java

Original NVD Description

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.