{"vulnerability": "CVE-2026-5965", "sightings": [{"uuid": "20aa27fb-b420-4ada-812c-aa894a549c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5965", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjy5jzk6ke2l", "content": "", "creation_timestamp": "2026-04-21T04:30:30.342009Z"}, {"uuid": "feeb7484-8f0e-47f0-8248-377e10b05b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5965", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjy6lb2iad2q", "content": "", "creation_timestamp": "2026-04-21T04:49:05.759703Z"}, {"uuid": "311bb795-a854-49ec-9c56-927355aadb44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5965", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10857-c46f7-2.html", "content": "", "creation_timestamp": "2026-04-20T20:23:00.000000Z"}, {"uuid": "0ea8c63d-673d-4495-a482-8e964835ee60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5965", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjyd3bq7mj2q", "content": "", "creation_timestamp": "2026-04-21T06:09:37.231022Z"}, {"uuid": "1d818c8b-39c0-43a5-8bca-777e86e96565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5965", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjydn6lro32e", "content": "", "creation_timestamp": "2026-04-21T06:19:37.894801Z"}, {"uuid": "c3d71cea-a030-48c3-9658-4ceb30bc026c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5965", "type": "published-proof-of-concept", "source": "Telegram/1Pb-KptaOS8jtUqbqEGgMTqxd6XnuqAfoWvymUwYUnm4klk", "content": "", "creation_timestamp": "2026-04-21T05:15:20.000000Z"}, {"uuid": "93500549-e564-4208-8aac-b3242200da34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms5e6epot62u", "content": "CVE-2026-59650 - bc-java\nBouncy Castle Java versions 1.85 and earlier, and 2.73.12 and earlier, allow an attacker to potentially exploit a vulnerability by manipulating an unvalidated value in a Diffie-Hellman\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bcjava #CVE #infosec", "creation_timestamp": "2026-08-03T01:36:16.269957Z"}, {"uuid": "703f9459-8f9d-4441-8ec7-0e1e33d3009f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59650", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117029694758734914", "content": "BC-JAVA users: CVE-2026-59650 (CRITICAL, CVSS 9.3) exposes MTI/A0 Diffie-Hellman via improper input validation. Affects &lt;1.85, 2.73.0 \u2013 2.73.11. No patch yet \u2014 avoid affected versions &amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-59650-cwe-20-improper-input-validation-in-legion-of-the-bouncy-castle-inc-bc-java-bfb9720e803b614a #OffSeq #Vulnerability #Java #Cryptography", "creation_timestamp": "2026-08-03T04:32:37.196437Z"}, {"uuid": "08a65e38-2ad6-46a3-88a6-552d35f59370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7f455okk2l", "content": "CVE-2026-59650 - bouncycastle\nBouncy Castle Java versions before 1.85 and LTS before 2.73.12 are affected. This vulnerability allows an attacker to potentially exploit the system by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-03T20:56:04.630396Z"}, {"uuid": "513bd074-93c6-4660-bf65-91f089f95c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschktsuo22u", "content": "CVE-2026-59650 - bouncycastle\nBouncy Castle for Java versions before 1.85 and 2.73.12 LTS allow an attacker to potentially compromise the security of a Diffie-Hellman key exchange by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #canonical #UbuntuPro1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:18:04.755960Z"}]}