{"uuid": "9ea5c17f-db72-4b2a-90f4-8d7023e3f794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71885", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117376511158765467", "content": "CRITICAL CVE-2026-71885 in Bouncy Castle BC-JAVA (&lt;1.86): Improper X.509 cert validation in MLS lets attackers impersonate users &amp; compromise group comms. Upgrade to 1.86+ ASAP. https://radar.offseq.com/threat/cve-2026-71885-cwe-295-improper-certificate-validation-in-legion-of-the-bouncy-castle-inc-bc-java-13dda4ca65417833 #OffSeq #CVE202671885 #JavaSecurity #Infosec", "creation_timestamp": "2026-10-03T10:30:25.424432Z"}