https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T01:36:27.600551+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-334683 EUVD-2026-334683 2026-10-26T01:36:27.603219+00:00 EUVD-2026-334683 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42120 fkie_cve-2022-42120 2026-10-26T01:36:27.603257+00:00

A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' `namespace` attribute.

 https://cve.radiocsirt.org/vuln/ghsa-r5fj-j449-vqw2 GHSA-r5fj-j449-vqw2 — Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module 2026-10-26T01:36:27.603288+00:00

Affected: Maven: com.liferay:com.liferay.fragment.service, Maven: com.liferay.portal:release.dxp.bom

A SQL injection vulnerability in the Fragment module before 4.0.33 from Liferay Portal (7.3.3 through 7.4.3.16), and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' `namespace` attribute.

 https://cve.radiocsirt.org/vuln/gsd-2022-42120 gsd-2022-42120 2026-10-26T01:36:27.603316+00:00 gsd-2022-42120