CVE-2026-0636

Low

Low Medium High Critical

CVSS Score

Published: Apr 15, 2026

Last Modified: Apr 17, 2026

Vulnerability Description

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHelper.

This issue affects BC-JAVA: from 1.74 before 1.84.

Available Security Patches

1 patch available from vendors

View All Patches

SUSE

CVE-2026-0636

Severity

Unknown

Released

Apr 17, 2026

Security Update

View Details Vendor Page

Browse All Security Patches

References & Resources

Severity Details

out of 10.0

Low

Weakness Type (CWE)

CWE-90

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

Description: The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a…
Typical Severity: Medium
Abstraction Level: Base