HIGH
Bouncycastle
CVE published 2026-10-02
CVE-2026-16000
A vulnerability in the Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker to forge ciphertexts with valid authentication tags when using KCcmBlockCipher directly without associated data. This issue arises from a missing cryptographic step in the DSTU 7624 CCM mode implementation, specifically in how the G1 block processes the nonce, message length, and parameter flags into the CBC- [truncated]