VULNERABILITY INTELLIGENCE

CVE-2026-63578

CVSS score7.5 HIGH

EPSS probability0.14%

CISA KEVNot currently listed

Published2026-10-02

Last modified2026-10-28

Description

Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply an encrypted private key, such as a PKCS#8 EncryptedPrivateKeyInfo or "ENCRYPTED PRIVAT…