NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-5598
Summary

Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).
Non-constant time comparisons risk private key leakage in FrodoKEM.

This issue affects BC-JAVA: from 2.17.3 before 1.84.

Publication Date April 15, 2026, 7:16 p.m.
Registration Date April 17, 2026, 4:11 a.m.
Last Update April 18, 2026, 12:38 a.m.
Related information, measures and tools
Common Vulnerabilities List