CVE-2026-59650

A flaw was found in Bouncy Castle for Java. The software fails to validate Diffie-Hellman peer values during key agreement. A remote attacker can exploit this flaw to compromise cryptographic keys, potentially leading to the decryption of sensitive communications or successful impersonation.

This is an Important vulnerability where Bouncy Castle for Java, as used in Red Hat products, fails to validate Diffie-Hellman peer values during key agreement. This flaw allows a remote attacker to compromise cryptographic keys, potentially leading to the decryption of sensitive communications or successful impersonation, due to the low attack complexity and lack of required user interaction.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.