vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-5598

Non-constant time comparisons risk private key leakage in FrodoKEM.

HIGH
7.5
CVSS Score
Published: April 15, 2026 at 09:05 AM UTC
Updated: October 26, 2026 at 09:10 PM UTC
2 products affected across 2 vendorsBC JavaFuse

Using BC-JAVA by Legion of the Bouncy Castle Inc.?

Get instant alerts when new vulnerabilities affect BC-JAVA - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 0.9%
SSVC
No known exploit

Description

Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). Non-constant time comparisons risk private key leakage in FrodoKEM. This issue affects BC-JAVA: from 2.17.3 before 1.84.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

BC Java· Legion of Bouncy Castlemaven
90%
1.71 ≤ v < 1.80.21.81 ≤ v < 1.81.11.82 ≤ v < 1.841.711.811.82
Affected range stops below 1.80.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 1.81.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 1.84, so it looks safe — our inference, not a vendor statement
Fuse· Red Hatrpm
60%
7
Vendor states this is fixed in 7 (unaffected)

References (16)

Source: cverecord
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998
Patch
Source: cverecord
https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87
Patch
Source: cverecord
https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5
Vendor Advisory
Source: cverecord
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598
Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:12267
Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:12269
Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:18054
Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:18055

SSVC — Action Prioritization

SSVCNo known exploitAutomatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHredhat-SADP
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusAWAITING ANALYSIS
CWE
CWE-385

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card