{"vulnerability": "cve-2026-59650", "sightings": [{"uuid": "93500549-e564-4208-8aac-b3242200da34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms5e6epot62u", "content": "CVE-2026-59650 - bc-java\nBouncy Castle Java versions 1.85 and earlier, and 2.73.12 and earlier, allow an attacker to potentially exploit a vulnerability by manipulating an unvalidated value in a Diffie-Hellman\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bcjava #CVE #infosec", "creation_timestamp": "2026-08-03T01:36:16.269957Z"}, {"uuid": "703f9459-8f9d-4441-8ec7-0e1e33d3009f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59650", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117029694758734914", "content": "BC-JAVA users: CVE-2026-59650 (CRITICAL, CVSS 9.3) exposes MTI/A0 Diffie-Hellman via improper input validation. Affects <1.85, 2.73.0 \u2013 2.73.11. No patch yet \u2014 avoid affected versions & monitor for updates. https://radar.offseq.com/threat/cve-2026-59650-cwe-20-improper-input-validation-in-legion-of-the-bouncy-castle-inc-bc-java-bfb9720e803b614a #OffSeq #Vulnerability #Java #Cryptography", "creation_timestamp": "2026-08-03T04:32:37.196437Z"}, {"uuid": "08a65e38-2ad6-46a3-88a6-552d35f59370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7f455okk2l", "content": "CVE-2026-59650 - bouncycastle\nBouncy Castle Java versions before 1.85 and LTS before 2.73.12 are affected. This vulnerability allows an attacker to potentially exploit the system by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-03T20:56:04.630396Z"}, {"uuid": "513bd074-93c6-4660-bf65-91f089f95c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschktsuo22u", "content": "CVE-2026-59650 - bouncycastle\nBouncy Castle for Java versions before 1.85 and 2.73.12 LTS allow an attacker to potentially compromise the security of a Diffie-Hellman key exchange by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #canonical #UbuntuPro1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:18:04.755960Z"}]}