Syncing intelligence signals
—
↻  Threat intelligence updated — dashboard refreshed automatically
Public threat intelligence console

PUBLIC THREAT FEED

NVD and CISA KEV intelligence, severity trends, exploit signals, and searchable CVE records in a public operational view.

NVD CISA KEV CVSS 180d heatmap

Live snapshot for non-JavaScript and search clients

Last updated: 2026-08-03 06:00:51

Last 7 days: 2100 total records, 294 critical, 707 high, 2 CISA KEV.

  1. CVE-2026-14682 HIGH CVSS 8.7 - In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), and before bctls-fips 1.0.24.
  2. CVE-2026-13586 MEDIUM CVSS 5.3 - In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
  3. CVE-2026-13506 HIGH CVSS 8.7 - In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
  4. CVE-2026-12860 HIGH CVSS 8.7 - In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12.
  5. CVE-2026-12852 HIGH CVSS 8.7 - In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
  6. CVE-2026-12817 HIGH CVSS 8.7 - In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).
  7. CVE-2026-12816 HIGH CVSS 8.7 - In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12.
  8. CVE-2026-12803 HIGH CVSS 8.7 - In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS before 2.73.12.
  9. CVE-2026-12802 HIGH CVSS 8.7 - In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).
  10. CVE-2026-58063 MEDIUM CVSS 5.3 - In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
Total Records
CISA KEV
selected range

New CVE Distribution

Top Critical CVEs

last 7 days

Actively Exploited (CISA KEV)

last 7 days

Threat Heatmap — Last 180 Days

Low Medium High Critical

All CVEs -- records

CVE ID CVSS / Risk Description Published
Page 1 / 1
Critical CVE Signal — 180D Public Feed
0 CRITICAL CVEs