CVE-2026-12860 Blast Radius

HIGH • CVSS 8.7In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle f…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-12860.

Start Free Scan →← Back to CVE-2026-12860