CVE-2026-5598
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). Non-constant time comparisons risk private key leakage in FrodoKEM. This issue affects BC-JAVA: from 2.17.3 before 1.84.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.9
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red
- EPSS probability
- 0.90%
- CWE
- CWE-385
- Published
- 2026-04-15
- Last modified
- 2026-08-12
Affected products
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-JAVA
Weakness type
Related vulnerabilities
- CVE-2026-84308 — phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
- CVE-2026-55785 — free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
- CVE-2026-6478 — PostgreSQL discloses MD5-hashed passwords via covert timing channel
- CVE-2025-59425 — vLLM vulnerable to timing attack at bearer auth
- CVE-2025-9231 — Timing side-channel in SM2 algorithm on 64 bit ARM
- CVE-2025-59432 — Timing Attack Vulnerability in SCRAM Authentication
- CVE-2025-49087 — In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal...
- CVE-2025-53826 — FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout