{"vulnerability": "CVE-2026-5963", "sightings": [{"uuid": "d1ca8051-5248-44a0-8c0c-fabfbaff98a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5963", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjwasprzzn2i", "content": "", "creation_timestamp": "2026-04-20T10:23:43.152751Z"}, {"uuid": "8e702c87-07a8-4709-a693-eee38069a6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5963", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjwb6wqfbm2g", "content": "", "creation_timestamp": "2026-04-20T10:30:33.293969Z"}, {"uuid": "1fa57293-8bd7-42f5-aaea-da8e90eef913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5963", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjwbf2iuwh2a", "content": "", "creation_timestamp": "2026-04-20T10:33:58.081783Z"}, {"uuid": "2e543deb-f774-47c2-97b8-f0db1a15222f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5963", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjx6b2273g2n", "content": "", "creation_timestamp": "2026-04-20T19:10:42.571644Z"}, {"uuid": "2d37ceea-5f2e-4c9d-a0e7-4ea5c87bef6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5963", "type": "seen", "source": "https://bsky.app/profile/threat-surface.bsky.social/post/3mk5u5xkel22l", "content": "", "creation_timestamp": "2026-04-23T10:58:41.126710Z"}, {"uuid": "1b73a781-be73-47ed-a94f-919b25c70d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5963", "type": "seen", "source": "Telegram/Lm9dzPhVRFRRMgyzsUGG1X5A2Qj2Q71JCDe8XQUe2-0mpLw", "content": "", "creation_timestamp": "2026-04-20T09:17:22.000000Z"}, {"uuid": "400ad253-53ab-4fc1-b285-c905cb8e3d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59638", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117028986804143783", "content": "CVE-2026-59638 (CRITICAL, CVSS 9.3) in BC-JAVA: Improper cert validation due to default CN-fallback can expose TLS connections to MITM. Affects <1.85, LTS <2.73.12. Patch status unknown \u2014 monitor vendor & consider disabling fallback. https://radar.offseq.com/threat/cve-2026-59638-cwe-297-improper-validation-of-certificate-with-host-mismatch-in-legion-of-the-bouncy-aa319f6f20b27a8a #OffSeq #CVE202659638 #infosec", "creation_timestamp": "2026-08-03T01:30:25.595860Z"}, {"uuid": "5f246e24-7e10-4641-9f7f-a418cf749785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59639", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117036528234088485", "content": "Bouncy Castle Java 1.85 has been released. It includes fixes to various rather significant vulnerabilities and weaknesses. Some highlights:\n- CVE-2026-8763 - Name Constraints bypass via trailing dot in rfc822Name and URI.- CVE-2026-12803 - KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery).- CVE-2026-12816 - IESEngine stream-mode MAC forgery via length-dependent KDF split.- CVE-2026-58061 - CCM-family modes write plaintext to caller buffer before tag check.- CVE-2026-58062 - Stapled OCSP response accepted without binding to the checked certificate.- CVE-2026-59639 - CMS verifySignatures returns true for SignedData with zero signers.\nhttps://www.bouncycastle.org/resources/new-release-bouncy-castle-java-1-85/\n#infosec #cybersecurity", "creation_timestamp": "2026-08-04T09:28:18.093196Z"}, {"uuid": "80dbaeaa-9086-48ff-a129-a78fb33d0a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms6jtixsxk2u", "content": "CVE-2026-59638\nBouncy Castle for Java versions before 1.85, 2.73.12, and certain FIPS versions allow an attacker to bypass hostname verification, potentially leading to man-in-the-middle attacks. This is a security concern\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-03T12:48:03.826233Z"}, {"uuid": "6775a096-7656-43d9-a24c-f4db7e2ebdf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7f44jsss2l", "content": "CVE-2026-59638 - bouncycastle\nBouncy Castle for Java versions before 1.85, LTS before 2.73.12, and FIPS versions before 1.0.24, 2.0.24, and 2.1.24 have a security problem. This means that some\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-03T20:56:03.734604Z"}, {"uuid": "95af5651-003c-467f-ab03-6f89c4b24dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5963", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlobmdkwqq2z", "content": "\ud83d\udccc CVE-2026-5963 - EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to re... https://www.cyberhub.blog/cves/CVE-2026-5963", "creation_timestamp": "2026-05-12T17:07:07.887617Z"}, {"uuid": "1e04e259-81ce-404c-81cc-92db7a398974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschz5e2cv2s", "content": "CVE-2026-59638 - bouncycastle\nBouncy Castle for Java versions 1.85 and earlier, and Java LTS versions 2.73.12 and earlier, have a security setting enabled by default that could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #canonical #UbuntuPro1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:26:04.661275Z"}]}