Daily Threat Briefing
← All briefings

Bouncy Castle for Java · N-able N-central · Vikunja

Date: 2026-08-03 Prepared for: SOC Analysts | Incident Responders | Vulnerability Management | Security Leadership

Executive Summary

Today’s dominant development is a large batch release from Bouncy Castle for Java (BC-JAVA < 1.85, BC-LTS-JAVA < 2.73.12, BC-FJA multiple versions) addressing 15+ cryptographic vulnerabilities rated CVSS 7.1–9.3, including signature bypass, TLS hostname validation failure, and memory exhaustion flaws. Additionally, N-able N-central has received an incomplete-patch advisory (CVE-2026-18577) that bypasses the previously reported CVE-2026-18556 fix, restoring full authentication bypass risk. No new CISA KEV additions in the last 24 hours.

Critical Vulnerabilities

CVE-2026-58062 / CVE-2026-59638 / CVE-2026-8763 / CVE-2026-59650 et al. — Bouncy Castle for Java

  • Severity: CVSS 9.3 (multiple CVEs); 8.7 (multiple CVEs); 7.1 (two CVEs)
  • EPSS: 0 (newly published)
  • Technical detail: Bouncy Castle published 15+ CVEs today against BC-JAVA < 1.85, BC-LTS-JAVA < 2.73.12, and BC-FJA across multiple version lines. The highest-severity flaws (CVSS 9.3) include: stapled OCSP responses accepted without binding to the checked certificate (CVE-2026-58062), enabling certificate impersonation; JSSE hostname verifier CN-fallback enabled by default despite documented opt-in (CVE-2026-59638), allowing TLS MitM; Name Constraints bypass via trailing dot in rfc822Name/URI (CVE-2026-8763), undermining PKI path validation; and MTI/A0 DH agreement exponentiating an unvalidated peer value (CVE-2026-59650), enabling invalid-curve attacks. CVSS 8.7 flaws include: CCM-mode plaintext written to caller buffer before tag check (CVE-2026-58061), breaking authenticated encryption guarantees; CMS verifySignatures() returning true for SignedData with zero signers (CVE-2026-59639), a critical signature bypass; OpenPGP CFB quick-check oracle (CVE-2026-59640); DTLS handshake reassembler allocating from unchecked 24-bit length (CVE-2026-59646), enabling heap exhaustion; OER parser recursing without depth limit (CVE-2026-59645), enabling stack exhaustion; and unbounded HSS public-key level count on verify (CVE-2026-58060). Bouncy Castle is embedded in a very large number of Java enterprise applications, TLS stacks, PKI tooling, and security products — including many deployed across European financial, healthcare, and government environments.
  • Exploitation status: No confirmed in-the-wild exploitation; zero-EPSS reflects recency. The signature bypass (CVE-2026-59639) and TLS validation failures (CVE-2026-58062, CVE-2026-59638) are particularly attractive for exploitation in PKI and S/MIME workflows.
  • Remediation: Upgrade BC-JAVA to 1.85, BC-LTS-JAVA to 2.73.12, and BC-FJA to the applicable fixed version (1.0.24 / 2.0.24 / 2.1.24 for DTLS/hostname; consult the Bouncy Castle release notes for per-CVE version mapping). Audit all Java applications and middleware for bundled Bouncy Castle JARs — pay particular attention to applications performing certificate validation, S/MIME processing, CMS signature verification, or OpenPGP operations.

CVE-2026-18577 — N-able N-central (Incomplete Patch)

  • Severity: CVSS 8.2
  • EPSS: 0 (newly published)
  • Technical detail: The patch issued for CVE-2026-18556 (authentication bypass in N-central, reported 2026-08-02) is incomplete. CVE-2026-18577 documents that the bypass remains exploitable through versions up to 2026.3.1, restoring full authentication bypass and account takeover risk. N-central is an enterprise RMM platform widely used by MSPs across Europe; a successful bypass grants an attacker privileged access to all managed endpoints.
  • Exploitation status: No confirmed exploitation; RMM platforms are a high-priority target for ransomware operators and supply-chain threat actors.
  • Remediation: Verify that N-central is updated beyond 2026.3.1 (the previously applied patch is insufficient). Enforce MFA on all N-central accounts; restrict management interfaces to dedicated management networks; audit for unauthorized access or configuration changes since the original advisory.

CVE-2026-68582 / CVE-2026-68581 — Vikunja (BOLA / Authorization Bypass)

  • Severity: CVSS 9.3 (CVE-2026-68582); 8.6 (CVE-2026-68581)
  • EPSS: 0 (newly published)
  • Technical detail: Two authorization flaws in Vikunja (open-source project management, versions 0.22.0–2.3.0). CVE-2026-68582 is a broken object-level authorization (BOLA) in the task-collection endpoint (GET /api/v1/projects/{project}/views/{view}/tasks), allowing authenticated users to read tasks from arbitrary projects. CVE-2026-68581 fails to validate the principal type in API token management — because user IDs and link-share IDs share independent numeric sequences resolved through a generic lookup, a link-share token can be used to perform API token management operations intended only for authenticated users. Vikunja instances exposed to the internet or shared multi-tenant environments are at risk of cross-tenant data disclosure and privilege escalation.
  • Exploitation status: No confirmed exploitation reported.
  • Remediation: Upgrade Vikunja to 2.4.0. Restrict Vikunja API access to authenticated internal users where possible; audit API token assignments and project access logs for anomalous cross-project access.

CVE-2026-68579 — FreeRDP (Heap Buffer Overflow, Windows Clipboard)

  • Severity: CVSS 8.7
  • EPSS: 0 (newly published)
  • Technical detail: A heap-based buffer overflow in FreeRDP’s Windows clipboard client (CliprdrStream_Read, client/Windows/wf_cliprdr.c) before 3.30.0. When an OLE paste consumer (e.g., Explorer) triggers a clipboard read, a malicious RDP server can supply a crafted response to overflow the heap buffer. This is a server-to-client exploitation path, meaning a compromised or malicious RDP server can attack connecting clients. This is distinct from the FreeRDP 3.29.0 batch reported yesterday.
  • Exploitation status: No confirmed exploitation reported.
  • Remediation: Upgrade FreeRDP to 3.30.0. Note: yesterday’s remediation guidance targeted 3.29.0 — this CVE requires an additional upgrade step to 3.30.0.

CVE-2026-3245 — Canon PRISMAproduction (Deserialization / RCE)

  • Severity: CVSS 7.7
  • EPSS: 0 (newly published)
  • Technical detail: A deserialization vulnerability in Canon Production Printing’s PRISMAproduction (version 6.5 and earlier) may lead to arbitrary code execution. PRISMAproduction is an enterprise print workflow platform used in large-scale production printing environments, including publishing, financial services, and government print operations. Deserialization flaws of this class typically require network access to the affected service endpoint.
  • Exploitation status: No confirmed exploitation reported.
  • Remediation: Apply Canon’s security update. Isolate PRISMAproduction servers from untrusted networks; restrict access to print workflow management interfaces.

ONGOING:

  • CVE-2026-48449 (Adobe Campaign Classic): CVSS 10.0 unauthenticated RCE — patch immediately; restrict ACC interfaces.
  • CVE-2026-18556 (N-able N-central): Superseded by CVE-2026-18577 above — re-patch required.
  • CVE-2026-68580 (FreeRDP audio integer overflow, < 3.29.0): Upgrade to 3.29.0+.
  • CVE-2026-67305 et al. (FreeRDP < 3.29.0): Upgrade to 3.30.0 now covers both batches.
  • CVE-2026-67324 et al. (GitPython): Upgrade to 3.1.52; audit CI/CD pipelines.
  • CVE-2026-8457 (WooCommerce Social Login): Update to 2.8.8+; audit admin accounts.
  • CVE-2026-66066 (Rails Active Storage): Upgrade Rails + libvips ≥ 8.13; rotate secrets.
  • CVE-2026-16232 (Check Point SmartConsole): Actively exploited — treat unpatched instances as compromised.
  • CVE-2026-0257 (PAN-OS GlobalProtect): Qilin ransomware exploitation ongoing — patch immediately.
  • CVE-2026-20316 (Cisco FMC): CISA KEV deadline passed — verify patch completion.
  • CVE-2026-59309/10 (VMware vCenter): No workarounds; patch urgently.

European Advisories

No new BSI WID or CERT-EU advisories were published in the last 24 hours.

Heise Security reports that Eclipse Foundation and OWASP are jointly launching a security education initiative for open-source projects in preparation for the EU Cyber Resilience Act (CRA). The program aims to help open-source maintainers meet CRA security requirements ahead of enforcement. This is relevant for European organizations that contribute to or depend on open-source components subject to CRA obligations.

CVE-2026-18577 (N-able N-central incomplete patch): covered in Critical Vulnerabilities.

Active Threats and Campaigns

ONGOING — Storm-2945 / CaptiveCrunch (CornFlake RAT): No new developments; hotel Wi-Fi hijacking campaign delivering surveillance RAT attributed to Midnight Blizzard sub-cluster — enforce VPN-before-browsing for traveling staff.

ONGOING — AMOS Stealer (macOS): Active infections reported by SANS ISC; update macOS EDR signatures and review endpoint telemetry.

ONGOING — Phishing targeting AI service brands: Campaigns impersonating ChatGPT and similar services active; update email gateway rules.

ONGOING — XCSSET v40 (macOS/Xcode): Unit 42 analysis published; scan Xcode project repos, enforce code-signing policies.

ONGOING — Adform supply-chain (crypto clipboard hijacking): Adform has remediated; audit third-party script integrity and enforce SRI controls.

ONGOING — DeepSeek-assisted autonomous attacks: Chinese-speaking threat actor using DeepSeek + Hermes Agent for autonomous server exploitation; ensure internet-facing systems are patched and monitored.

Security News and Context

  • Coldcard wallet RNG flaw — $88.6M Bitcoin theft: Bleeping Computer updates the figure to ~$88.6M (previously reported as $70M); the March 2021 firmware PRNG flaw remains the attributed root cause. Coldcard users should verify firmware integrity and consider key migration.
  • Arch Linux AUR package adoption suspended: Arch Linux temporarily disabled AUR package adoption following a surge in malicious takeovers of existing packages — relevant for organizations using Arch-based systems or AUR packages in development pipelines.
  • Eclipse/OWASP CRA readiness program: Heise Security reports a joint initiative to prepare open-source projects for EU Cyber Resilience Act compliance obligations.
  1. Bouncy Castle for Java (CVE-2026-58062 et al.): Upgrade BC-JAVA to 1.85, BC-LTS-JAVA to 2.73.12, BC-FJA to applicable fixed versions; audit all Java applications for bundled BC JARs — prioritize PKI, S/MIME, and CMS signature workflows.
  2. N-able N-central (CVE-2026-18577): Re-patch to a version beyond 2026.3.1 — the previously applied fix for CVE-2026-18556 is insufficient; enforce MFA and restrict management interface exposure.
  3. FreeRDP (CVE-2026-68579): Upgrade to 3.30.0 (supersedes yesterday’s 3.29.0 guidance); covers all known FreeRDP vulnerabilities across both recent batches.
  4. Vikunja (CVE-2026-68582 / CVE-2026-68581): Upgrade to 2.4.0; audit API token assignments and cross-project access logs.
  5. Canon PRISMAproduction (CVE-2026-3245): Apply vendor patch; isolate print workflow servers from untrusted networks.
  6. Arch Linux / AUR environments: Audit AUR-sourced packages in development and build pipelines for signs of malicious tampering; consider pinning to trusted package sources.
  7. EU Cyber Resilience Act: Review open-source component inventory for CRA applicability; engage with Eclipse/OWASP readiness resources for maintainer obligations.
  8. Adobe Campaign Classic (CVE-2026-48449): Patch immediately if not already completed — CVSS 10.0 unauthenticated RCE.
  9. Coldcard hardware wallets: Communicate updated loss figure ($88.6M) to relevant stakeholders; confirm key migration status for affected wallet holders.
  10. Continue remediation of previously reported items: Rails Active Storage (CVE-2026-66066), GitPython (CVE-2026-67324 et al.), WooCommerce Social Login (CVE-2026-8457), Check Point SmartConsole (CVE-2026-16232), PAN-OS (CVE-2026-0257), Cisco FMC (CVE-2026-20316), VMware vCenter (CVE-2026-59309/10).