CLEANSTART-2026-AH53818: In Bouncy Castle for Java before 1
CVE-2026-71886 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/wso2amto a version that resolves this vulnerability.Fixed in 4.7.0-r5 - Upgrade
Upgrade
cleanstart/rundeckto a version that resolves this vulnerability.Fixed in 6.0.1-r11
Event History
Frequently Asked Questions
Which deployed software should be prioritized for investigation?
The affected software list identifies cleanstart/wso2am and cleanstart/rundeck. The advisory states that the underlying issue affects multiple packages, so deployments of either listed package should be reviewed.
Is a fixed Bouncy Castle for Java version available from this advisory?
No. The provided data only states that Bouncy Castle for Java versions before 1 are affected and does not provide a complete fixed version or package-specific remediation version.
Can this issue be exploited remotely without authentication?
The supplied severity vector indicates network attack vector, low attack complexity, no privileges required, and no user interaction. It also indicates attack requirements are present, so exploitation depends on an additional unspecified condition.