https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:50:31.188417+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T23:50:31.192057+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-226150 EUVD-2026-226150 2026-10-06T23:50:31.192144+00:00 EUVD-2026-226150 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45320 fkie_cve-2022-45320 2026-10-06T23:50:31.192172+00:00

Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.

 https://cve.radiocsirt.org/vuln/ghsa-mc8m-4r3w-q2hw GHSA-mc8m-4r3w-q2hw — Privilege escalation in Liferay Portal 2026-10-06T23:50:31.192217+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.

 https://cve.radiocsirt.org/vuln/gsd-2022-45320 gsd-2022-45320 2026-10-06T23:50:31.192254+00:00 gsd-2022-45320 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0419 WID-SEC-W-2024-0419 — Liferay Portal und DXP: Schwachstelle ermöglicht Privilegieneskalation 2026-10-06T23:50:31.192282+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Liferay Portal und Liferay DXP ausnutzen, um seine Privilegien zu erhöhen.