https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:48:07.215565+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-03T01:48:07.287009+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-195076 EUVD-2026-195076 2026-10-03T01:48:07.287052+00:00 EUVD-2026-195076 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3426 fkie_cve-2023-3426 2026-10-03T01:48:07.287068+00:00

The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.

 https://cve.radiocsirt.org/vuln/ghsa-xph3-vjcq-g488 GHSA-xph3-vjcq-g488 — Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions 2026-10-03T01:48:07.287098+00:00

Affected: Maven: com.liferay:com.liferay.organizations.item.selector.web, Maven: com.liferay.portal:release.dxp.bom

The organization selector before 4.0.14 from Liferay Portal (7.4.3.81 through 7.4.3.85), and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.

 https://cve.radiocsirt.org/vuln/gsd-2023-3426 gsd-2023-3426 2026-10-03T01:48:07.287124+00:00 gsd-2023-3426 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1946 WID-SEC-W-2023-1946 — Liferay DXP und Portal: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T01:48:07.287136+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Liferay DXP und Liferay Portal ausnutzen, um Informationen offenzulegen.