CVE-2026-8763

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8763", "assignerOrgId": "91579145-5d7b-4cc5-b925-a0262ff19630", "state": "PUBLISHED", "assignerShortName": "bcorg", "dateReserved": "2026-05-17T06:03:57.082Z", "datePublished": "2026-08-03T00:36:05.088Z", "dateUpdated": "2026-10-05T01:16:57.817Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "91579145-5d7b-4cc5-b925-a0262ff19630", "shortName": "bcorg", "dateUpdated": "2026-10-05T01:16:57.817Z"}, "title": "Name Constraints bypass via trailing dot in rfc822Name and URI", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation", "type": "CWE"}]}], "affected": [{"vendor": "Legion of the Bouncy Castle Inc.", "product": "BC-JAVA", "platforms": ["all"], "collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java/", "packageName": "bcprov", "repo": "https://github.com/bcgit/bc-java", "packageURL": "pkg:maven/org.bouncycastle/bcprov-jdk18on", "modules": ["core"], "programFiles": ["PKIXNameConstraintValidator"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.85", "versionType": "maven"}], "defaultStatus": "unaffected"}, {"vendor": "Legion of the Bouncy Castle Inc.", "product": "BC-LTS-JAVA", "platforms": ["all"], "collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-lts/", "packageName": "bcprov-lts8on", "repo": "https://github.com/bcgit/bc-lts-java", "packageURL": "pkg:maven/org.bouncycastle/bcprov-lts8on", "modules": ["core"], "programFiles": ["PKIXNameConstraintValidator"], "versions": [{"status": "affected", "version": "2.73.0", "lessThan": "2.73.12", "versionType": "maven"}], "defaultStatus": "unaffected"}, {"vendor": "Legion of the Bouncy Castle Inc.", "product": "BC-FJA", "platforms": ["all"], "collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-fips/", "packageName": "bc-fips", "packageURL": "pkg:maven/org.bouncycastle/bc-fips", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.0.2.7", "versionType": "maven"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.2", "versionType": "maven"}, {"status": "affected", "version": "2.1.0", "lessThan": "2.1.3", "versionType": "maven"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).</p>"}]}], "references": [{"url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763", "tags": ["vendor-advisory"]}, {"url": "https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558", "tags": ["patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber"}}], "credits": [{"lang": "en", "value": "Alex Gaynor in collaboration with Claude and Anthropic Research", "type": "reporter"}, {"lang": "en", "value": "1seal (Oleh Konko)", "type": "reporter"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "bc release-notes template"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-03T13:29:15.549114Z", "id": "CVE-2026-8763", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-03T13:29:24.563Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-8763", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-03T13:29:15.549114Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-03T13:29:20.495Z"}}], "cna": {"title": "Name Constraints bypass via trailing dot in rfc822Name and URI", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "Alex Gaynor in collaboration with Claude and Anthropic Research"}, {"lang": "en", "type": "reporter", "value": "1seal (Oleh Konko)"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/bcgit/bc-java", "vendor": "Legion of the Bouncy Castle Inc.", "modules": ["core"], "product": "BC-JAVA", "versions": [{"status": "affected", "version": "0", "lessThan": "1.85", "versionType": "maven"}], "platforms": ["all"], "packageURL": "pkg:maven/org.bouncycastle/bcprov-jdk18on", "packageName": "bcprov", "programFiles": ["PKIXNameConstraintValidator"], "collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java/", "defaultStatus": "unaffected"}, {"repo": "https://github.com/bcgit/bc-lts-java", "vendor": "Legion of the Bouncy Castle Inc.", "modules": ["core"], "product": "BC-LTS-JAVA", "versions": [{"status": "affected", "version": "2.73.0", "lessThan": "2.73.12", "versionType": "maven"}], "platforms": ["all"], "packageURL": "pkg:maven/org.bouncycastle/bcprov-lts8on", "packageName": "bcprov-lts8on", "programFiles": ["PKIXNameConstraintValidator"], "collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-lts/", "defaultStatus": "unaffected"}, {"vendor": "Legion of the Bouncy Castle Inc.", "product": "BC-FJA", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.0.2.7", "versionType": "maven"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.2", "versionType": "maven"}, {"status": "affected", "version": "2.1.0", "lessThan": "2.1.3", "versionType": "maven"}], "platforms": ["all"], "packageURL": "pkg:maven/org.bouncycastle/bc-fips", "packageName": "bc-fips", "collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-fips/", "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763", "tags": ["vendor-advisory"]}, {"url": "https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558", "tags": ["patch"]}], "x_generator": {"engine": "bc release-notes template"}, "descriptions": [{"lang": "en", "value": "In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "supportingMedia": [{"type": "text/html", "value": "<p>In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation"}]}], "providerMetadata": {"orgId": "91579145-5d7b-4cc5-b925-a0262ff19630", "shortName": "bcorg", "dateUpdated": "2026-10-05T01:16:57.817Z"}}}, "cveMetadata": {"cveId": "CVE-2026-8763", "state": "PUBLISHED", "dateUpdated": "2026-10-05T01:16:57.817Z", "dateReserved": "2026-05-17T06:03:57.082Z", "assignerOrgId": "91579145-5d7b-4cc5-b925-a0262ff19630", "datePublished": "2026-08-03T00:36:05.088Z", "assignerShortName": "bcorg"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java/", "defaultStatus": "unaffected", "modules": ["core"], "packageName": "bcprov", "packageURL": "pkg:maven/org.bouncycastle/bcprov-jdk18on", "platforms": ["all"], "product": "BC-JAVA", "programFiles": ["PKIXNameConstraintValidator"], "repo": "https://github.com/bcgit/bc-java", "vendor": "Legion of the Bouncy Castle Inc.", "versions": [{"lessThan": "1.85", "status": "affected", "version": "0", "versionType": "maven"}]}, {"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-lts/", "defaultStatus": "unaffected", "modules": ["core"], "packageName": "bcprov-lts8on", "packageURL": "pkg:maven/org.bouncycastle/bcprov-lts8on", "platforms": ["all"], "product": "BC-LTS-JAVA", "programFiles": ["PKIXNameConstraintValidator"], "repo": "https://github.com/bcgit/bc-lts-java", "vendor": "Legion of the Bouncy Castle Inc.", "versions": [{"lessThan": "2.73.12", "status": "affected", "version": "2.73.0", "versionType": "maven"}]}, {"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-fips/", "defaultStatus": "unaffected", "packageName": "bc-fips", "packageURL": "pkg:maven/org.bouncycastle/bc-fips", "platforms": ["all"], "product": "BC-FJA", "vendor": "Legion of the Bouncy Castle Inc.", "versions": [{"lessThan": "1.0.2.7", "status": "affected", "version": "1.0.0", "versionType": "maven"}, {"lessThan": "2.0.2", "status": "affected", "version": "2.0.0", "versionType": "maven"}, {"lessThan": "2.1.3", "status": "affected", "version": "2.1.0", "versionType": "maven"}]}], "source": "91579145-5d7b-4cc5-b925-a0262ff19630"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*", "matchCriteriaId": "FA6A5663-2E62-44AA-8A64-A3CB0DC8813B", "versionEndExcluding": "1.85", "vulnerable": true}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy_castle_for_java_lts:*:*:*:*:*:*:*:*", "matchCriteriaId": "F5ED4F42-08FF-4642-815D-1ED0C82FDBD2", "versionEndIncluding": "2.73.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:*", "matchCriteriaId": "BDB0974E-66FC-45AB-9F1B-0E80B86A4D06", "versionEndExcluding": "1.0.2.7", "versionStartIncluding": "1.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:*", "matchCriteriaId": "B1C285AC-E2BF-4A23-BCD4-494CB5B2C42D", "versionEndExcluding": "2.0.2", "versionStartIncluding": "2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF53C833-06C3-4BDC-BEF6-50A8B8A0A47C", "versionEndExcluding": "2.1.3", "versionStartIncluding": "2.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series)."}], "id": "CVE-2026-8763", "lastModified": "2026-09-02T14:28:48.940", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "91579145-5d7b-4cc5-b925-a0262ff19630", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8763", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-03T13:29:15.549114Z", "version": "2.0.3"}}]}, "published": "2026-08-03T01:16:45.807", "references": [{"source": "91579145-5d7b-4cc5-b925-a0262ff19630", "tags": ["Patch"], "url": "https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558"}, {"source": "91579145-5d7b-4cc5-b925-a0262ff19630", "tags": ["Third Party Advisory", "Patch"], "url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763"}], "sourceIdentifier": "91579145-5d7b-4cc5-b925-a0262ff19630", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "91579145-5d7b-4cc5-b925-a0262ff19630", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["all"], "status": "affected", "versions": {"scheme": "generic", "value": "[1.0.0,1.0.2.7)"}}, {"platform": ["all"], "status": "affected", "versions": {"scheme": "semver", "value": "[2.0.0,2.0.2)"}}, {"platform": ["all"], "status": "affected", "versions": {"scheme": "semver", "value": "[2.1.0,2.1.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "bc-fja", "vendor": "legion_of_the_bouncy_castle_inc."}, {"configurations": [{"platform": ["all"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.85)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "bc-java", "vendor": "legion_of_the_bouncy_castle_inc."}, {"configurations": [{"platform": ["all"], "status": "affected", "versions": {"scheme": "semver", "value": "[2.73.0,2.73.12)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "bc-lts-java", "vendor": "legion_of_the_bouncy_castle_inc."}], "created": "2026-08-03T09:15:03.910397+00:00", "updated": "2026-08-03T15:52:45.137236+00:00", "vendors": ["legion_of_the_bouncy_castle_inc.", "legion_of_the_bouncy_castle_inc.$PRODUCT$bc-fja", "legion_of_the_bouncy_castle_inc.$PRODUCT$bc-java", "legion_of_the_bouncy_castle_inc.$PRODUCT$bc-lts-java"]}