Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CGA-rwg6-vvvx-8hv8
published 9 days ago
Summary
No summary available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | pinot | All versions |
Original advisory text
CGA-rwg6-vvvx-8hv8
References
- https://www.bouncycastle.org/download/bouncy-castle-java-fips/ URL
- https://www.bouncycastle.org/download/bouncy-castle-java-lts/ URL
- https://www.bouncycastle.org/download/bouncy-castle-java/ URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/17xxx/CVE-2026-17508... Vendor Advisory
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9017508 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-17508 Vendor Advisory
- https://github.com/bcgit/bc-java/commit/20ed9e203caec91d25cd386ceb6d364e9b068f67 Patch
- https://github.com/bcgit/bc-java/commit/442393bf187c914b1e66fbed4fab532a1fe06c6a Patch
- https://github.com/bcgit/bc-java/commit/480d878aa6f7dc8b20403064f304bbe0decbbb1a Patch
- https://github.com/bcgit/bc-java/commit/766a31026ac24ed3c6cad8662058ba450c338da1 Patch
- https://github.com/bcgit/bc-java/commit/882fdab53f6c4c150a5d6a4e6ef1fc05d382385a Patch
- https://github.com/bcgit/bc-java/commit/e72bc0681ff4227fced912ef7394daf7b7d57bb3 Patch
- https://github.com/bcgit/bc-java Product
- https://github.com/bcgit/bc-lts-java Product
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published26 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CGA-rwg6-vvvx-8hv8 · OSV
Track software like this
Free during beta