Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-59646: CWE-789 Memory Allocation with Excessive Size Value in Legion of the Bouncy Castle Inc. BC-JAVACVE-2026-59646
0

CVE-2026-59646 is a high-severity vulnerability in Legion of the Bouncy Castle Inc.'s BC-JAVA library. The issue involves the DTLS handshake reassembler allocating a buffer based on an unchecked 24-bit length value, leading to potential memory allocation with excessive size. This affects Bouncy Castle for Java versions prior to 1.85 and certain LTS and FIPS versions before specified patch releases.

Join the discussion
CVE-2026-59638: CWE-297 Improper Validation of Certificate with Host Mismatch in Legion of the Bouncy Castle Inc. BC-JAVACVE-2026-59638
0

CVE-2026-59638 is a critical vulnerability in Legion of the Bouncy Castle Inc.'s BC-JAVA library affecting versions before 1.85 and certain LTS and FIPS versions. The issue arises because the JSSE hostname verifier CN-fallback is enabled by default despite being documented as an opt-in feature. This improper validation of certificates with host mismatches can lead to security risks in TLS connections.

Join the discussion

Showing 1 to 2 of 2 results

Filters:Package: pkg:github/bctls-lts8on
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses