Name Constraints bypass via trailing dot in rfc822Name and URI

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• bouncycastle bc-javabefore 1.85
• bouncycastle bouncy castle for java ltsup to 2.73.11 inclusive
• bouncycastle fips java api1.0.0 and later · before 1.0.2.7
• bouncycastle fips java api2.0.0 and later · before 2.0.2
• bouncycastle fips java api2.1.0 and later · before 2.1.3

Versions reported by the vendor

Affected version ranges reported by the assigning authority (bcorg). Independent of NVD's CPE analysis and usually ahead of it.

• Legion of the Bouncy Castle Inc. BC-FJA

  • 1.0.0 and later · before 1.0.2.7affected · maven
  • 2.0.0 and later · before 2.0.2affected · maven
  • 2.1.0 and later · before 2.1.3affected · maven

• Legion of the Bouncy Castle Inc. BC-JAVA

  • before 1.85affected · maven

• Legion of the Bouncy Castle Inc. BC-LTS-JAVA

  • 2.73.0 and later · before 2.73.12affected · maven

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2007-6721The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impac
  41Plan
• CVE-2018-1000613Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of
  40Plan
• CVE-2026-58062Stapled OCSP response accepted without binding to the checked certificate
  37Monitor
• CVE-2026-59650MTI/A0 DH agreement exponentiates unvalidated peer value
  37Monitor
• CVE-2026-59638JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
  37Monitor
• CVE-2026-14682Possible OOM from unbounded up-front allocation on a definite-length read
  34Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

A certificate validation error is silently swallowed instead of terminating the connection. Often, code added for a test environment makes its way into production.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1override fun checkServerTrusted(chain: Array<X509Certificate>, type: String) {2  // Left empty for the test environment3}

1val client = OkHttpClient.Builder()2  .certificatePinner(3    CertificatePinner.Builder()4      .add("api.sirius.example", "sha256/…")5      .build()6  ).build()

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.