CVE-2026-71888Published
CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent
cve-program · CVE-2026-71888
Publishedbcpkix
https://www.bouncycastle.org/download/bouncy-castle-java/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Legion of the Bouncy Castle Inc.",
"product": "BC-JAVA",
"platforms": [
"all"
],
"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"packageName": "bcpkix",
"repo": "https://github.com/bcgit/bc-java",
"packageURL": "pkg:maven/org.bouncycastle/bcpkix-jdk18on",
"modules": [
"pkix"
],
"programFiles": [
"CMSAuthenticatedDataParser"
],
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.86",
"versionType": "maven"
}
],
"defaultStatus": "unaffected"
}bcutil
https://www.bouncycastle.org/download/bouncy-castle-java/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Legion of the Bouncy Castle Inc.",
"product": "BC-JAVA",
"platforms": [
"all"
],
"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"packageName": "bcutil",
"repo": "https://github.com/bcgit/bc-java",
"packageURL": "pkg:maven/org.bouncycastle/bcutil-jdk18on",
"modules": [
"util"
],
"programFiles": [
"AuthenticatedData"
],
"versions": [
{
"status": "affected",
"version": "1.70",
"lessThan": "1.86",
"versionType": "maven"
}
],
"defaultStatus": "unaffected"
}bcpkix-lts8on
https://www.bouncycastle.org/download/bouncy-castle-java-lts/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Legion of the Bouncy Castle Inc.",
"product": "BC-LTS-JAVA",
"platforms": [
"all"
],
"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-lts/",
"packageName": "bcpkix-lts8on",
"repo": "https://github.com/bcgit/bc-lts-java",
"packageURL": "pkg:maven/org.bouncycastle/bcpkix-lts8on",
"modules": [
"pkix"
],
"programFiles": [
"CMSAuthenticatedDataParser"
],
"versions": [
{
"status": "affected",
"version": "2.73.0",
"lessThan": "2.73.13",
"versionType": "maven"
}
],
"defaultStatus": "unaffected"
}bcutil-lts8on
https://www.bouncycastle.org/download/bouncy-castle-java-lts/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Legion of the Bouncy Castle Inc.",
"product": "BC-LTS-JAVA",
"platforms": [
"all"
],
"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-lts/",
"packageName": "bcutil-lts8on",
"repo": "https://github.com/bcgit/bc-lts-java",
"packageURL": "pkg:maven/org.bouncycastle/bcutil-lts8on",
"modules": [
"util"
],
"programFiles": [
"AuthenticatedData"
],
"versions": [
{
"status": "affected",
"version": "2.73.0",
"lessThan": "2.73.13",
"versionType": "maven"
}
],
"defaultStatus": "unaffected"
}bcpkix-fips
https://www.bouncycastle.org/download/bouncy-castle-java-fips/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Legion of the Bouncy Castle Inc.",
"product": "BC-FJA",
"platforms": [
"all"
],
"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-fips/",
"packageName": "bcpkix-fips",
"packageURL": "pkg:maven/org.bouncycastle/bcpkix-fips",
"versions": [
{
"status": "affected",
"version": "1.0.0",
"lessThan": "1.0.13",
"versionType": "maven"
},
{
"status": "affected",
"version": "2.0.0",
"lessThan": "2.0.13",
"versionType": "maven"
},
{
"status": "affected",
"version": "2.1.0",
"lessThan": "2.1.13",
"versionType": "maven"
}
],
"defaultStatus": "unaffected"
}bcutil-fips
https://www.bouncycastle.org/download/bouncy-castle-java-fips/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Legion of the Bouncy Castle Inc.",
"product": "BC-FJA",
"platforms": [
"all"
],
"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-fips/",
"packageName": "bcutil-fips",
"packageURL": "pkg:maven/org.bouncycastle/bcutil-fips",
"versions": [
{
"status": "affected",
"version": "2.0.0",
"lessThan": "2.0.8",
"versionType": "maven"
},
{
"status": "affected",
"version": "2.1.0",
"lessThan": "2.1.8",
"versionType": "maven"
}
],
"defaultStatus": "unaffected"
}Original source record · Cite this exact observation · Complete original publisher JSON