Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-12817: CWE-354 Improper Validation of Integrity Check Value in Legion of the Bouncy Castle Inc. BC-JAVACVE-2026-12817
0

CVE-2026-12817 is a high severity vulnerability in Legion of the Bouncy Castle Inc.'s BC-JAVA library. It affects OpenPGP AEAD decryption in versions before 1.85 and certain LTS and FIPS versions prior to specified patch releases. The issue causes the decryption process to skip the final tag on chunk-aligned data, leading to improper validation of the integrity check value.

Join the discussion
CVE-2026-59649: CWE-789 Memory Allocation with Excessive Size Value in Legion of the Bouncy Castle Inc. BC-JAVACVE-2026-59649
0

A vulnerability in Bouncy Castle for Java (BC-JAVA) before version 1.85 and certain LTS and FIPS versions allows excessive memory allocation due to unbounded OpenPGP user-attribute subpacket length. This could lead to resource exhaustion. The issue affects versions prior to 1.85, and LTS versions from 2.73.0 up to but not including 2.73.12, as well as specific BC-FJA FIPS series versions.

Join the discussion
CVE-2026-59648: CWE-770 Allocation of Resources Without Limits or Throttling in Legion of the Bouncy Castle Inc. BC-JAVACVE-2026-59648
0

CVE-2026-59648 is a medium severity vulnerability in Bouncy Castle for Java (BC-JAVA) where the OpenPGP Argon2 S2K implementation honors attacker-chosen memory and iteration parameters. This affects versions before 1.85, including LTS versions before 2.73.12 and specific FIPS series versions. The issue relates to allocation of resources without limits or throttling, potentially allowing resource exhaustion.

Join the discussion
CVE-2026-59640: CWE-203 Observable Discrepancy in Legion of the Bouncy Castle Inc. BC-JAVACVE-2026-59640
0

CVE-2026-59640 is a high-severity vulnerability in Bouncy Castle for Java (BC-JAVA) involving an observable discrepancy (CWE-203) in the OpenPGP CFB quick-check mechanism on symmetric/session-key paths. It affects versions before 1.85 and versions from 2.73.0 up to but not including 2.73.12, as well as certain FIPS series versions. The vulnerability allows an attacker to observe differences that could potentially leak information. No official patch or remediation guidance is currently provided by the vendor.

Join the discussion

Showing 1 to 4 of 4 results

Filters:Package: pkg:github/bcpg-lts8on
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses