Live › vulnerability › CVE-2026-0636
Bouncy Castle's Java cryptography library builds an LDAP query from input without neutralizing special characters, in the LDAPStoreHelper code. An attacker who controls that input can alter the LDAP query and read or match directory entries it should not reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 03:26 UTC, 0h before NVD. All times on this page are UTC.
Only Java applications that pull in a Bouncy Castle provider module in the affected version ranges are exposed, and only if they build LDAP queries from input the attacker can influence through the certificate store code path. Applications that do not use the LDAP certificate store, or that use only fixed versions, can skip it. The sources do not say which default configurations reach LDAPStoreHelper.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| org.bouncycastle:bcprov-jdk14 | maven | >= 1.74, < 1.80.2 | 1.80.2 |
| org.bouncycastle:bcprov-jdk15to18 | maven | >= 1.74, < 1.80.2 | 1.80.2 |
| org.bouncycastle:bcprov-jdk18on | maven | >= 1.74, < 1.80.2 | 1.80.2 |
| org.bouncycastle:bcprov-jdk14 | maven | >= 1.81, < 1.81.1 | 1.81.1 |
| org.bouncycastle:bcprov-jdk15to18 | maven | >= 1.81, < 1.81.1 | 1.81.1 |
| org.bouncycastle:bcprov-jdk18on | maven | >= 1.81, < 1.81.1 | 1.81.1 |
| org.bouncycastle:bcprov-jdk14 | maven | >= 1.82, < 1.84 |
| 1.84 |
| org.bouncycastle:bcprov-jdk15to18 | maven | >= 1.82, < 1.84 | 1.84 |
| org.bouncycastle:bcprov-jdk18on | maven | >= 1.82, < 1.84 | 1.84 |
bcprov-jdk14, bcprov-jdk15to18 or bcprov-jdk18on in your Maven or Gradle dependency tree.bcprov-jdk14, bcprov-jdk15to18, bcprov-jdk18on on the 1.80 line: 1.80.2bcprov-jdk14, bcprov-jdk15to18, bcprov-jdk18on on the 1.81 line: 1.81.1bcprov-jdk14, bcprov-jdk15to18, bcprov-jdk18on on the 1.82 to 1.83 line: 1.84Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper.
Issue affecting: BC 1.74 to 1.80.1, BC 1.81, BC 1.82 to BC 1.83.
Fixed versions: BC 1.80.2, BC 1.81.1, BC 1.84
This page as .md · .json · in your agent: get_signal("CVE-2026-0636")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.