CVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF split
Published Aug 3, 2026
·Updated
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12.
Affected Software
2 affected components
Bouncy Castle Bouncy Castle for Java<1.85
Bouncy Castle for Java LTS<2.73.12
Event History
Aug 3, 2026
CVE Published
via MITRE·02:53 AM
Data Sourced
via MITRE·02:53 AM
DescriptionWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-12816?
CVE-2026-12816 has a high severity score of 8.7.
2
How do I fix CVE-2026-12816?
To resolve CVE-2026-12816, upgrade to Bouncy Castle for Java version 1.85 or later, or Bouncy Castle for Java LTS version 2.73.12 or later.
3
What impact does CVE-2026-12816 have on my application?
CVE-2026-12816 could allow attackers to forge MACs in stream-mode, compromising data integrity.
4
Which versions of Bouncy Castle are affected by CVE-2026-12816?
Bouncy Castle for Java versions prior to 1.85 and Bouncy Castle for Java LTS versions before 2.73.12 are affected by CVE-2026-12816.
5
Is CVE-2026-12816 a remote exploit?
Yes, CVE-2026-12816 can potentially be exploited remotely due to its nature within the application.