Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-8763

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 27.8%
CVSS Severity
CVSS v3 Score 9.1
Products affected by CVE-2026-8763


Contact Us

Shodan ® - All rights reserved