https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:10:07.714108+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-07T01:10:07.717906+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-239662 EUVD-2026-239662 2026-10-07T01:10:07.717942+00:00 EUVD-2026-239662 https://cve.radiocsirt.org/vuln/fkie_cve-2023-47798 fkie_cve-2023-47798 2026-10-07T01:10:07.717957+00:00

Account lockout in Liferay Portal 7.2.0 through 7.3.0, and older unsupported versions, and Liferay DXP 7.2 before fix pack 5, and older unsupported versions does not invalidate existing user sessions, which allows remote authenticated users to remain authenticated after an account has been locked.

 https://cve.radiocsirt.org/vuln/ghsa-2mx7-xvfg-fg53 GHSA-2mx7-xvfg-fg53 — Liferay Portal's account lockout does not invalidate existing user sessions 2026-10-07T01:10:07.717985+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Account lockout in Liferay Portal 7.2.0 through 7.3.0, and older unsupported versions, and Liferay DXP 7.2 before fix pack 5, and older unsupported versions does not invalidate existing user sessions, which allows remote authenticated users to remain authenticated after an account has been locked.

 https://cve.radiocsirt.org/vuln/gsd-2023-47798 gsd-2023-47798 2026-10-07T01:10:07.718010+00:00 gsd-2023-47798 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0323 WID-SEC-W-2024-0323 — Liferay Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-07T01:10:07.718022+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.