high
7.5
CVE-2026-5598 json
Non-constant time comparisons risk private key leakage in FrodoKEM.
published 2026-04-15 6 mo ago modified 2026-11-04 5 d ago also GHSA-p93r-85wp-75v3 , EUVD-2026-22872
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 59%
- public exploits
- 0
- none known
Summary
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).
This vulnerability is associated with program files FrodoEngine.Java.
This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
Patch / fix
- maven org.bouncycastle:bcprov-jdk15to18 1.80.2
- maven org.bouncycastle:bcprov-jdk14 1.84
- maven org.bouncycastle:bcprov-jdk18on 1.80.2, 1.84
- Legion of the Bouncy Castle Inc. BC-JAVA 1.80.2, 1.81.1, 1.84
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 0:1.5.26-2.Final_redhat_00001.1.el7eap, 0:1.10.0-46.Final_redhat_00044.1.el7eap, 0:1.84.0-1.redhat_00001.1.el7eap, 0:2.2.40-2.SP3_redhat_00001.1.el7eap, 0:2.3.14-11.SP11_redhat_00001.1.el7eap, 0:2.5.5-24.SP12_redhat_00016.1.el7eap, 0:2.5.5-30.SP12_redhat_00020.1.el7eap, 0:2.16.0-22.redhat_00057.1.el7eap, 0:2.18.8-1.redhat_00003.1.el7eap, 0:4.1.135-1.Final_redhat_00001.1.el7eap, 0:5.0.31-3.SP2_redhat_00001.1.el7eap, 0:7.4.25-2.GA_redhat_00001.1.el7eap
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 0:1.5.26-2.Final_redhat_00001.1.el8eap, 0:1.10.0-46.Final_redhat_00044.1.el8eap, 0:1.84.0-1.redhat_00001.1.el8eap, 0:2.2.40-1.SP3_redhat_00001.1.el8eap, 0:2.3.14-11.SP11_redhat_00001.1.el8eap, 0:2.5.5-24.SP12_redhat_00016.1.el8eap, 0:2.5.5-30.SP12_redhat_00020.1.el8eap, 0:2.16.0-22.redhat_00057.1.el8eap, 0:2.18.8-1.redhat_00003.1.el8eap, 0:4.1.135-1.Final_redhat_00001.1.el8eap, 0:5.0.31-3.SP2_redhat_00001.1.el8eap, 0:7.4.25-2.GA_redhat_00001.1.el8eap
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9 0:1.5.26-2.Final_redhat_00001.1.el9eap, 0:1.10.0-46.Final_redhat_00044.1.el9eap, 0:1.84.0-1.redhat_00001.1.el9eap, 0:2.2.40-1.SP3_redhat_00001.1.el9eap, 0:2.3.14-11.SP11_redhat_00001.1.el9eap, 0:2.5.5-24.SP12_redhat_00016.1.el9eap, 0:2.5.5-30.SP12_redhat_00020.1.el9eap, 0:2.16.0-22.redhat_00057.1.el9eap, 0:2.18.8-1.redhat_00003.1.el9eap, 0:4.1.135-1.Final_redhat_00001.1.el9eap, 0:5.0.31-3.SP2_redhat_00001.1.el9eap, 0:7.4.25-2.GA_redhat_00001.1.el9eap
- Red Hat Red Hat JBoss Enterprise Application Platform 8.1.7.GA 1.84.0.redhat-00001
- Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 0:1.84.0-1.redhat_00001.1.el8eap
- Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 0:1.84.0-1.redhat_00001.1.el9eap
- bouncycastle Debian 14 1.86-1
debian advisories DEBIAN-CVE-2026-5598
- eap8-angus jboss enterprise application platform 8.1 2.0.5-1.redhat_00001.1.el8eap
- eap8-guava jboss enterprise application platform 8.1 33.0.0-3.jre_redhat_00004.1.el8eap
- eap8-netty jboss enterprise application platform 8.1 4.1.132-1.Final_redhat_00001.1.el8eap
- eap8-yasson jboss enterprise application platform 8.1 3.0.4-5.redhat_00007.1.el8eap
- eap8-jctools jboss enterprise application platform 8.1 4.0.6-1.redhat_00001.1.el8eap
- eap8-wildfly jboss enterprise application platform 8.1 8.1.6-5.GA_redhat_00007.1.el8eap
- eap8-hibernate jboss enterprise application platform 8.1 6.6.48-1.Final_redhat_00001.1.el8eap
- eap8-angus-mail jboss enterprise application platform 8.1 2.0.5-1.redhat_00001.1.el8eap
red hat advisories RHSA-2026:53645RHSA-2026:53646RHSA-2026:53644RHSA-2026:18054RHSA-2026:18055RHSA-2026:12267
- bouncycastle openSUSE Tumbleweed 1.84-1.1
opensuse advisories openSUSE-SU-2026:10571-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2026-5598 updated cvss 7.5
bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons
-
Red Hat Fuse 7 bcprov-jdk15affected: workaround, no fix planned “Will not fix”
-
Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server eap7-wildfly 7.4.25-2.GA_redhat_00001.1.el7eap, eap7-bouncycastle 1.84.0-1.redhat_00001.1.el7eap, eap7-jackson-core 2.18.8-1.redhat_00003.1.el7eap, eap7-netty 4.1.135-1.Final_redhat_00001.1.el7eap, eap7-undertow 2.2.40-2.SP3_redhat_00001.1.el7eap, eap7-bouncycastle-pg 1.84.0-1.redhat_00001.1.el7eap, +84 morefixed: vendor fix RHSA-2026:53644
-
Red Hat JBoss EAP 7.4 ELS for RHEL 8 eap7-bouncycastle 1.84.0-1.redhat_00001.1.el8eap, eap7-bouncycastle-pg 1.84.0-1.redhat_00001.1.el8eap, eap7-bouncycastle-mail 1.84.0-1.redhat_00001.1.el8eap, eap7-bouncycastle-pkix 1.84.0-1.redhat_00001.1.el8eap, eap7-bouncycastle-prov 1.84.0-1.redhat_00001.1.el8eap, eap7-bouncycastle-util 1.84.0-1.redhat_00001.1.el8eap Red Hat JBoss EAP 7.4 ELS for RHEL 9 eap7-bouncycastle 1.84.0-1.redhat_00001.1.el9eap, eap7-bouncycastle-pg 1.84.0-1.redhat_00001.1.el9eap, eap7-bouncycastle-mail 1.84.0-1.redhat_00001.1.el9eap, eap7-bouncycastle-pkix 1.84.0-1.redhat_00001.1.el9eap, eap7-bouncycastle-prov 1.84.0-1.redhat_00001.1.el9eap, eap7-bouncycastle-util 1.84.0-1.redhat_00001.1.el9eapfixed: vendor fix RHSA-2026:12267
-
Red Hat JBoss EAP 8.1 for RHEL 8 eap8-bouncycastle 1.84.0-1.redhat_00001.1.el8eap, eap8-bouncycastle-pg 1.84.0-1.redhat_00001.1.el8eap, eap8-bouncycastle-pkix 1.84.0-1.redhat_00001.1.el8eap, eap8-bouncycastle-prov 1.84.0-1.redhat_00001.1.el8eap, eap8-bouncycastle-util 1.84.0-1.redhat_00001.1.el8eap, eap8-bouncycastle-jmail 1.84.0-1.redhat_00001.1.el8eapfixed: vendor fix RHSA-2026:18054
-
Red Hat JBoss EAP 8.1 for RHEL 9 eap8-bouncycastle 1.84.0-1.redhat_00001.1.el9eap, eap8-bouncycastle-pg 1.84.0-1.redhat_00001.1.el9eap, eap8-bouncycastle-pkix 1.84.0-1.redhat_00001.1.el9eap, eap8-bouncycastle-prov 1.84.0-1.redhat_00001.1.el9eap, eap8-bouncycastle-util 1.84.0-1.redhat_00001.1.el9eap, eap8-bouncycastle-jmail 1.84.0-1.redhat_00001.1.el9eapfixed: vendor fix RHSA-2026:18055
-
Red Hat JBoss Enterprise Application Platform 7.4.25 bcprov-jdk18on 1.84.0.redhat-00001fixed: vendor fix RHSA-2026:53806
-
Red Hat JBoss Enterprise Application Platform 8.1.6.GA bcprov-jdk18on 1.84.0.redhat-00001fixed: vendor fix RHSA-2026:18059
-
Red Hat Cryostat 4 bcprov-jdk18on Red Hat OpenShift Developer Tools and Services jenkins, jenkins-2-plugins, ocp-tools-4/jenkins-rhel8, ocp-tools-4/jenkins-rhel9 Red Hat AMQ Broker 7 bcprov-jdk15on, bcprov-jdk18on Red Hat AMQ Clients bcprov-jdk15on, bcprov-jdk18on Red Hat build of Apache Camel 4 for Quarkus 3 bcprov-jdk18on Red Hat build of Apache Camel for Spring Boot 4 bcprov-lts8on, bcprov-jdk15on, bcprov-jdk18on, bcprov-debug-jdk15onnot affected: vulnerable code not present
+5 more productsfewer
Red Hat build of Apicurio Registry 3 bcprov-lts8on, bcprov-jdk18on Red Hat build of Debezium 2 bcprov-jdk15on, bcprov-ext-jdk15on Red Hat build of Debezium 3 bcprov-lts8on, bcprov-jdk18on, bcprov-ext-jdk15on Red Hat Build of Keycloak bcprov-jdk18on Red Hat build of Quarkus bcprov-jdk18on
show 2 moreshow fewer
-
Red Hat Data Grid 8 bcprov-jdk15, bcprov-jdk15on, bcprov-jdk18on, bcprov-jdk15to18not affected: component not present
-
Red Hat Enterprise Linux 8 resteasy, resteasy-javadoc Red Hat Enterprise Linux 9 jmc, resteasy, pki-resteasy-core, pki-resteasy-client, pki-resteasy-jackson2-provider, pki-resteasy-servlet-initializer Red Hat Fuse 7 bcprov-jdk16, bcprov-jdk15on, bcprov-jdk18on, bcprov-jdk15to18, bcprov-ext-jdk15on, bcprov-ext-jdk18on, +1 more Red Hat JBoss EAP 8.1 for RHEL 8 eap8-angus 2.0.5-1.redhat_00001.1.el8eap, eap8-yasson 3.0.4-5.redhat_00007.1.el8eap, eap8-jctools 4.0.6-1.redhat_00001.1.el8eap, eap8-angus-mail 2.0.5-1.redhat_00001.1.el8eap, eap8-guava 33.0.0-3.jre_redhat_00004.1.el8eap, eap8-wildfly 8.1.6-5.GA_redhat_00007.1.el8eap, +71 more Red Hat JBoss EAP 8.1 for RHEL 9 eap8-angus 2.0.5-1.redhat_00001.1.el9eap, eap8-yasson 3.0.4-5.redhat_00007.1.el9eap, eap8-jctools 4.0.6-1.redhat_00001.1.el9eap, eap8-angus-mail 2.0.5-1.redhat_00001.1.el9eap, eap8-guava 33.0.0-3.jre_redhat_00004.1.el9eap, eap8-wildfly 8.1.6-5.GA_redhat_00007.1.el9eap, +71 more Red Hat JBoss Enterprise Application Platform 7 bcprov-jdk15on, bcprov-jdk18onnot affected: vulnerable code not present
+11 more productsfewer
Red Hat JBoss Enterprise Application Platform 7.4.25 pom.xml, c3 0.6.0, c3 0.7.1, d3 5.9.2, fs 2.1.2, ip 2.0.0, +1552 more Red Hat JBoss Enterprise Application Platform 8 bcprov-jdk15, bcprov-jdk15on, bcprov-jdk18on, bcprov-jdk15to18, bcprov-ext-jdk15on, bcprov-ext-jdk18on Red Hat JBoss Enterprise Application Platform 8.1.6.GA bla.zip, pom.xml, aesh 2.4, c3 0.6.4, d3 7.4.3, he 1.2.0, +2269 more Red Hat JBoss Enterprise Application Platform Expansion Pack bcprov-jdk12, bcprov-jdk15, bcprov-jdk15on, bcprov-jdk18on, bcprov-jdk15to18, bcprov-ext-jdk15on, +2 more Red Hat OpenShift AI (RHOAI) rhoai/odh-modelmesh-rhel8, rhoai/odh-modelmesh-rhel9 Red Hat OpenShift Dev Spaces devspaces/openvsx-rhel9, devspaces/pluginregistry-rhel9 Red Hat Process Automation 7 bcprov-jdk15on, bcprov-jdk15to18 Red Hat Satellite 6 candlepin, candlepin-selinux Red Hat Single Sign-On 7 bcprov-jdk15on Red Hat streams for Apache Kafka 2 bcprov-jdk15on, bcprov-jdk18on Red Hat streams for Apache Kafka 3 bcprov-jdk15on, bcprov-jdk18on
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 6 mo ago
Exploit prediction
0.90% chance of exploitation in the next 30 days, higher than 59% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.9 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red |
| CISA ADP | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| CNA | 4.0 | 8.9 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Red |
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | org.bouncycastle:bcprov-jdk15to18 | >=1.71, <1.80.2 |
1.80.2 |
| maven | org.bouncycastle:bcprov-jdk14 | >=1.71, <1.84 |
1.84 |
| maven | org.bouncycastle:bcprov-jdk18on | >=1.82, <1.84 >=1.81, <1.84 >=1.71, <1.80.2 |
1.84 1.80.2 |
Affected products
- Legion of the Bouncy Castle Inc. BC-JAVA
- Red Hat Red Hat JBoss Enterprise Application Platform 7
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8
- Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
- Red Hat Red Hat JBoss Enterprise Application Platform 8.1.7.GA
- Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
- Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
- Red Hat Cryostat 4
- Red Hat OpenShift Developer Tools and Services
- Red Hat Red Hat AMQ Broker 7
- Red Hat Red Hat AMQ Clients
- Red Hat Red Hat build of Apache Camel 4 for Quarkus 3
- Red Hat Red Hat build of Apache Camel for Spring Boot 4
- Red Hat Red Hat build of Apicurio Registry 3
- Red Hat Red Hat build of Debezium 2
- Red Hat Red Hat build of Debezium 3
- Red Hat Red Hat Build of Keycloak
- Red Hat Red Hat build of Quarkus
- Red Hat Red Hat Data Grid 8
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Fuse 7
- Red Hat Red Hat JBoss Enterprise Application Platform 8
- Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift Dev Spaces
- Red Hat Red Hat Process Automation 7
- Red Hat Red Hat Satellite 6
- Red Hat Red Hat Single Sign-On 7
- Red Hat streams for Apache Kafka 2
- Red Hat streams for Apache Kafka 3
Classification
- Weakness
-
- CWE-385 Covert Timing Channel
- Technology feeds
References
-
github.com
/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87
patch, web
-
github.com
/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5
patch, web
-
github.com
/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:53644
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:12267
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:53645
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:18054
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:53646
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:18055
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:12269
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:18059
vendor-advisory, web
-
access.redhat.com
/security/cve/CVE-2026-5598
vdb-entry, web
-
bugzilla.redhat.com
/show_bug.cgi?id=2458635
issue-tracking, web
-
security.access.redhat.com
/data/csaf/v2/vex/2026/cve-2026-5598.json
web
-
nvd.nist.gov
/vuln/detail/CVE-2026-5598
advisory
-
github.com
/bcgit/bc-java/wiki/CVE-2026-5598
web
-
github.com
/bcgit/bc-java
package
-
access.redhat.com
/errata/RHSA-2026:53806
web
Sources
- CVE List CVE-2026-5598
- GitHub Advisory GHSA-p93r-85wp-75v3
- NVD CVE-2026-5598
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.