{"vulnerability": "cve-2026-71886", "sightings": [{"uuid": "26494b57-84e1-46b6-9ed4-5e6ccaaab050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71886", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117381111756210909", "content": "CVE-2026-71886: Bouncy Castle for Java <1.86 HIGH severity vuln lets restricted OpenPGP subkeys improperly certify or delegate trust. No patch yet \u2014 validate key flags before accepting certifications. https://radar.offseq.com/threat/in-bouncy-castle-for-java-before-186-the-high-level-openpgp-certificate-api-accepted-a-third-party-032fc543ac46afc4 #OffSeq #JavaSecurity #PKI #BouncyCastle", "creation_timestamp": "2026-10-04T06:00:24.909922Z"}]}