https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-63568.htmlhttps://patchthecve.com/cve/CVE-2026-63568.htmlTue, 27 Oct 2026 16:05:42 +0000HIGH 7.5: Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PKMacBuilder) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker to cause a denial of service through CPU exhaustion via a CMP message or CRMF certificathttps://patchthecve.com/cve/CVE-2026-63567.htmlhttps://patchthecve.com/cve/CVE-2026-63567.htmlTue, 27 Oct 2026 16:20:42 +0000HIGH 7.5: Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured an IES or ECIES ciphertext, and who can submit modified ciphertexts for decryption under the same key pair, to recover its plaintext via a CBC paddinghttps://patchthecve.com/cve/CVE-2026-63566.htmlhttps://patchthecve.com/cve/CVE-2026-63566.htmlTue, 27 Oct 2026 16:25:06 +0000HIGH 7.5: Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReassembler) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated DTLS peer to cause a denial of service through memory exhaustion via crafted handshake messhttps://patchthecve.com/cve/CVE-2026-16001.htmlhttps://patchthecve.com/cve/CVE-2026-16001.htmlTue, 27 Oct 2026 16:31:05 +0000HIGH 7.5: Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an IesEngine constructed without a block cipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has observed one encrypted message with known plaintexhttps://patchthecve.com/cve/CVE-2026-16000.htmlhttps://patchthecve.com/cve/CVE-2026-16000.htmlTue, 27 Oct 2026 16:32:54 +0000HIGH 7.5: Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can observe encrypted messages of known or chosen content to forge ciphertexts with valid authentication tags, via messages encryptehttps://patchthecve.com/cve/CVE-2026-15999.htmlhttps://patchthecve.com/cve/CVE-2026-15999.htmlTue, 27 Oct 2026 16:34:53 +0000HIGH 7.5: Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacker to modify CCM-encrypted content without detection via an AlgorithmIdentifier whose CCMParameters declare