FLAT-78YF8 – Vulnerability | Fluid Attacks Database

Database

Description

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version
debian 11	bouncycastle	=1.68-2 \|\| =1.68-3 \|\| =1.68-4 \|\| =1.68-5 \|\| =1.69-1 \|\| =1.71-1 \|\| =1.72-1 \|\| =1.72-2 \|\| =1.77-1 \|\| =1.80-1 \|\| =1.80-2 \|\| =1.80-3
debian 12	bouncycastle	=1.72-2 \|\| =1.77-1 \|\| =1.80-1 \|\| =1.80-2 \|\| =1.80-3
debian 14	bouncycastle	=1.80-3
debian 13	bouncycastle	=1.80-3

Aliases

1. CVE-2026-596522. NVD-2026-596523. OSV-DEBIAN-2026-596524. OSV-2026-596525. SECURITY-TRACKER-CVE-2026-59652