Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-12802 is a high-severity vulnerability in Legion of the Bouncy Castle Inc.'s BC-JAVA library. It involves improper validation of the integrity check value in the CMS AuthEnvelopedData decryption process, specifically failing to enforce tag-length. This affects versions of Bouncy Castle for Java before 1.85 and certain LTS and FIPS versions prior to specified patch releases. Join the discussion | CVE Database V5 | 08/03/2026, 02:48:42 UTC Added: 08/03/2026, 04:03:44 UTC |
0 CVE-2026-59639 is a high severity vulnerability in Legion of the Bouncy Castle Inc.'s BC-JAVA library. The issue occurs in versions before 1.85 and certain 2.73.x versions, where the CMS verifySignatures method incorrectly returns true for SignedData objects that have zero signers. This improper verification of cryptographic signatures can undermine the trustworthiness of signature validation in affected versions. Join the discussion | CVE Database V5 | 08/03/2026, 00:56:24 UTC Added: 08/03/2026, 01:03:45 UTC |
0 CVE-2026-59642 is a high-severity vulnerability in Bouncy Castle for Java (BC-JAVA) affecting versions before 1.85 and certain LTS and FIPS versions prior to specified patch releases. The issue involves improper validation of the integrity check value in CMS AuthenticatedData when authenticated attributes are present, meaning the content is not properly bound to the MAC. This could undermine the integrity guarantees of the cryptographic message syntax implementation. Join the discussion | CVE Database V5 | 08/03/2026, 00:53:28 UTC Added: 08/03/2026, 01:03:45 UTC |
0 CVE-2026-59647 is a medium severity vulnerability in Bouncy Castle for Java where the CRMF/CMP password-MAC implementation honors an unbounded iteration count. This affects versions before 1.85, and versions from 2.73.0 up to but not including 2.73.12. The issue relates to allocation of resources without limits or throttling, potentially leading to resource exhaustion. Join the discussion | CVE Database V5 | 08/03/2026, 00:46:57 UTC Added: 08/03/2026, 01:03:47 UTC |
0 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All (pkix modules). This vulnerability is associated with program files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderBuilder.Java. This issue affects BC-JAVA: from 1.67 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84; BCPKIX-FIPS: from 2.0.6 before 2.0.11, from 2.1.7 before 2.1.11; BCPIX-LTS: from 2.73.7 before 2.73.11. Join the discussion | CVE Database V5 | 04/15/2026, 09:06:15 UTC Added: 04/15/2026, 09:31:59 UTC |
Showing 1 to 5 of 5 results