https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T14:41:25.634327+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-334690 EUVD-2026-334690 2026-10-16T14:41:25.637295+00:00 EUVD-2026-334690 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42127 fkie_cve-2022-42127 2026-10-16T14:41:25.637325+00:00

The Friendly Url module in Liferay Portal 7.4.3.5 through 7.4.3.36, and Liferay DXP 7.4 update 1 though 36 does not properly check user permissions, which allows remote attackers to obtain the history of all friendly URLs that was assigned to a page.

 https://cve.radiocsirt.org/vuln/ghsa-5x9h-p2gx-35mg GHSA-5x9h-p2gx-35mg — Incorrect Default Permissions in Liferay Portal 2026-10-16T14:41:25.637355+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

The Friendly Url module in Liferay Portal 7.4.3.5 through 7.4.3.36, and Liferay DXP 7.4 update 1 though 36 does not properly check user permissions, which allows remote attackers to obtain the history of all friendly URLs that was assigned to a page.

 https://cve.radiocsirt.org/vuln/gsd-2022-42127 gsd-2022-42127 2026-10-16T14:41:25.637378+00:00 gsd-2022-42127