CVE-2026-8798

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long as that flag stayed clear, so a persistent failure of the on-chip entropy source - whether from a hardware fault, from the underlying DRBG being exhausted by contention across many cores, or from a hypervisor that does not provide the instruction - left the calling thread looping indefinitely inside the JNI call, where it could be neither interrupted nor timed out. Any operation drawing from the native entropy source could therefore hang, denying service to the application. The retry loops are now bounded (200 attempts for RDSEED and 20 for RDRAND, twice the baselines given in Intel's Digital Random Number Generator software implementation guide), pausing between attempts and, on exhaustion, clearing any partially written buffer and throwing rather than continuing to spin. The clear is performed by an un-elidable memzero, which uses a volatile pointer and an assembly memory barrier so that a compiler cannot optimise the erase away as a dead store. Bouncy Castle for Java (bcprov) is not affected, as it has no native entropy source; the 1.0.X and 2.0.X FIPS series are not affected.

• CWE-835

• https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908798

Published

Aug 8, 2026

Last Modified

Aug 10, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8791The Booking System Trafft plugin for WordPress is vulnerable…6.4
• CVE-2026-8793PaperCut NG/MF does not properly restrict excessive authenti…6.9
• CVE-2026-8794PaperCut NG/MF contains an observable timing discrepancy in …6.9
• CVE-2026-8795A YAML injection vulnerability exists in the Windows.Collect…7.8
• CVE-2026-8796Sereal::Decoder versions before 5.005 for Perl allow heap ou…8.1
• CVE-2026-8797An access control deficiency vulnerability exists in Express…8.5
• CVE-2026-8800Incorrect Authorization vulnerability in Progress MOVEit Tra…8.8
• CVE-2026-8801Path equivalence: vulnerability in Progress MOVEit Transfer …9.8
• CVE-2026-8802A vulnerability was detected in opensourcepos Open Source Po…5.3
• CVE-2026-8803A flaw has been found in opensourcepos Open Source Point of …6.3
• CVE-2026-8804Puppet resource_api (shipped in Puppet Core 8.x and Puppet E…6.7
• CVE-2026-8805Integer Overflow or Wraparound vulnerability in the EtherNet…8.7