CVE-2026-8798 | Legion of the Bouncy Castle Bouncy Castle for Java FIPS up to 2.1.2 Native Entropy Source infinite loop

A vulnerability was found in Legion of the Bouncy Castle Bouncy Castle for Java FIPS up to 2.1.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Native Entropy Source. Performing a manipulation results in infinite loop.

This vulnerability is known as CVE-2026-8798. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.