Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-13505: CWE-772 Missing Release of Resource after Effective Lifetime in Legion of the Bouncy Castle Inc. BC-FJACVE-2026-13505 0 CVE-2026-13505 affects Bouncy Castle for Java FIPS (BC-FJA) versions 1.0.0, 2.0.0, and 2.1.0. The vulnerability arises from the use of Object.finalize for zeroising sensitive key material, which is unreliable on Java 9 and later due to deprecation and de-emphasis of finalization. This can cause sensitive cryptographic key material to remain in memory longer than intended, potentially increasing exposure risk. The issue does not affect Bouncy Castle for Java (bcprov) or Bouncy Castle for Java LTS. No official patch or remediation guidance is currently available. Join the discussion | CVE Database V5 | 08/08/2026, 00:59:40 UTC Added: 08/08/2026, 01:26:57 UTC |
CVE-2026-8798: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop') in Legion of the Bouncy Castle Inc. BC-FJACVE-2026-8798 0 CVE-2026-8798 is a high-severity vulnerability in Bouncy Castle for Java FIPS (BC-FJA) version 2.1.0 where the native entropy source on Intel platforms can enter an infinite loop due to unbounded retries of CPU entropy instructions RDSEED and RDRAND. This causes the calling thread to hang indefinitely, resulting in a denial of service. The issue affects only BC-FJA 2.1.0 and not other Bouncy Castle Java versions or FIPS series 1.0.X and 2.0.X. Join the discussion | CVE Database V5 | 08/08/2026, 00:50:56 UTC Added: 08/08/2026, 00:56:45 UTC |
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. (CVE-2026-15055)CVE-2026-15055 0 Bouncy Castle for Java versions before 1.85, including certain LTS and FIPS variants, contain a vulnerability where PKCS#8 / PBES2 decryptors accept an unbounded key derivation function (KDF) cost parameter from input. This can lead to resource exhaustion or denial of service conditions. The issue is identified as CWE-770 (Allocation of Resources Without Limits or Throttling). No known exploits are reported in the wild, and no official patch information is provided in the available data. Join the discussion | GCVE Database | 08/03/2026, 03:31:54 UTC Added: 08/03/2026, 21:22:11 UTC |
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. (CVE-2026-8763)CVE-2026-8763 0 A critical vulnerability exists in Bouncy Castle for Java before version 1.85 that allows bypassing Name Constraints via a trailing dot in rfc822Name and URI fields. This issue also affects Bouncy Castle for Java LTS versions before 2.73.12 and Bouncy Castle for Java FIPS versions before 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series), and 2.1.3 (2.1.X series). The vulnerability is identified as CVE-2026-8763 and relates to improper validation of name constraints, classified under CWE-295. No patch links are provided, and no known exploits are reported in the wild. Join the discussion | GCVE Database | 08/03/2026, 03:31:56 UTC Added: 08/03/2026, 21:22:08 UTC |
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. (CVE-2026-58062)CVE-2026-58062 0 Bouncy Castle for Java versions before 1.85 improperly accept stapled OCSP responses without verifying that the response is bound to the certificate being checked. This vulnerability also affects Bouncy Castle for Java LTS versions before 2.73.12, and Bouncy Castle for Java FIPS versions before 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series). Join the discussion | GCVE Database | 08/03/2026, 03:31:57 UTC Added: 08/03/2026, 21:22:08 UTC |
Showing 1 to 5 of 5 results