Cyber Resilience

CVE-2026-58059

DoS in Bouncycastle Fips Java Api 1.0.0 – 1.0.2.7

Published
03 August 2026
Modified
02 September 2026
Patch / advisory
CVSS Score v4 8.7
Click a component to see what it means
Raw vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
EPSS Score 0.0052 43th percentile
Risk Priority 45 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2026-58059 is a high-severity Inefficient Algorithmic Complexity (CWE-407) vulnerability in Bouncycastle Fips Java Api. Its CVSS base score is 8.7 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Endpoint Denial of Service (T1499); ranked at the 43th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SC-5 (Denial-of-service Protection) and SC-6 (Resource Availability) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series)…

more

and 2.1.3 (2.1.X series).

CWE(s)

Related Threats

MITRE ATT&CK Enterprise Techniques

T1499 Endpoint Denial of Service Impact
Adversaries may perform Endpoint Denial of Service (DoS) attacks to degrade or block the availability of services to users.
T1499.003 Application Exhaustion Flood Impact
Adversaries may target resource intensive features of applications to cause a denial of service (DoS), denying availability to those applications.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-58060Same product: Bouncycastle Bc-Java
CVE-2026-13506Same product: Bouncycastle Bc-Java
CVE-2026-14682Same product: Bouncycastle Bc-Java
CVE-2026-12185Same product: Bouncycastle Bc-Java
CVE-2026-58063Same product: Bouncycastle Bc-Java
CVE-2026-13586Same product: Bouncycastle Bc-Java
CVE-2026-59646Same product: Bouncycastle Bc-Java
CVE-2026-58062Same product: Bouncycastle Bc-Java
CVE-2026-59649Same product: Bouncycastle Bc-Java
CVE-2026-8763Same product: Bouncycastle Bc-Java

Affected Assets

bouncycastle
bc-java
≤ 1.85
bouncycastle
bouncy castle for java lts
≤ 2.73.11
bouncycastle
fips java api
1.0.0 — 1.0.2.7 · 2.0.0 — 2.0.2 · 2.1.0 — 2.1.3

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V1.2.9

Mitigating Controls (NIST 800-53 r5) AI

Denial-of-service protection directly reduces the impact of resource exhaustion triggered by worst-case algorithmic inputs.

Resource availability allocation limits blast radius when an inefficient algorithm is forced into its worst case.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

DE.CM-09 partial match
prevents

Runtime monitoring of software and resources can detect the performance impact of triggered worst-case complexity.

ID.RA-01 partial match
prevents

Identifying and recording algorithmic-complexity vulnerabilities directly addresses the root cause before exploitation.

PR.PS-06 partial match
prevents

Secure SDLC practices (code review, complexity analysis, safe algorithm selection) prevent introduction of exploitable worst-case behavior.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

mitigates

Redundancy of processing facilities can absorb resource exhaustion from inefficient algorithms.

finds

Monitoring activities can identify anomalous resource consumption indicative of algorithmic complexity attacks.

prevents

Secure development life cycle includes design reviews that can catch inefficient algorithms before deployment.

prevents

Secure system architecture principles encourage selection of algorithms with acceptable worst-case complexity.

prevents

Secure coding practices can include guidelines to avoid or mitigate inefficient algorithms.

finds

Security testing can uncover performance issues stemming from algorithmic complexity.

References