CVE-2026-0636

ADVISORY - github

Summary

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper.

This issue affects BC-JAVA: from 1.74 before 1.84.

EPSS Score⁠: 0.00047 (0.144)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-90⁠

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

ADVISORY - github

CWE-90⁠

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

Impacted images

Advisories

NIST

CREATED

3 days ago

UPDATED

12 hours ago

ADVISORY IDCVE-2026-0636⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-90⁠

CVSS SCORE

5.5medium

GitHub

CREATED

9 hours ago

UPDATED

2 hours ago

ADVISORY IDGHSA-c3fc-8qff-9hwx⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-90⁠

CVSS SCORE

5.5medium

Ubuntu

CREATED

6 hours ago

UPDATED

6 hours ago

ADVISORY IDCVE-2026-0636⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium