Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-59640 is a high-severity vulnerability in Bouncy Castle for Java (BC-JAVA) involving an OpenPGP CFB quick-check oracle on symmetric/session-key paths. This affects versions before 1.85, versions from 2.73.0 up to but not including 2.73.12, and certain FIPS series versions. The vulnerability is categorized under CWE-203 (Observable Discrepancy). No official patch or remediation level has been confirmed yet. Join the discussion | CVE Database V5 | 08/03/2026, 00:55:19 UTC Added: 08/03/2026, 01:03:45 UTC |
0 CVE-2026-59643 is a high-severity vulnerability in Legion of the Bouncy Castle Inc.'s BC-JAVA library affecting versions 1.81 through before 1.85. The issue involves improper verification of cryptographic signatures, specifically OpenPGP inline-signature policy failures that are silently ignored. This flaw also impacts the Bouncy Castle for Java FIPS (BC-FJA) before version bcpg-fips 2.0.13. The vulnerability could allow attackers to bypass signature verification checks, undermining cryptographic assurances. Join the discussion | CVE Database V5 | 08/03/2026, 00:51:55 UTC Added: 08/03/2026, 01:03:45 UTC |
0 CVE-2026-59648 is a medium severity vulnerability in Bouncy Castle for Java (BC-JAVA) affecting versions before 1.85 and certain LTS and FIPS versions. The issue involves the OpenPGP Argon2 S2K implementation honoring attacker-chosen memory and iteration parameters without limits or throttling, which can lead to resource exhaustion. No official patch or remediation level has been confirmed yet. Join the discussion | CVE Database V5 | 08/03/2026, 00:45:34 UTC Added: 08/03/2026, 01:03:47 UTC |
0 CVE-2026-59649 is a high severity vulnerability in Bouncy Castle for Java (BC-JAVA) involving memory allocation with an excessive size value. Specifically, the OpenPGP user-attribute subpacket length is only bounded by the JVM's maximum memory, potentially leading to excessive memory allocation. This affects versions before 1.85, as well as certain 2.x LTS and FIPS series versions prior to specified patch releases. Join the discussion | CVE Database V5 | 08/03/2026, 00:44:24 UTC Added: 08/03/2026, 01:03:47 UTC |
0 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java, OperatorHelper.Java. This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84. Join the discussion | CVE Database V5 | 04/15/2026, 09:06:37 UTC Added: 04/15/2026, 09:31:59 UTC |
Showing 1 to 5 of 5 results