https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:26:25.569145+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-05T13:26:25.574346+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-4293 EUVD-2026-4293 2026-10-05T13:26:25.574401+00:00 EUVD-2026-4293 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26267 fkie_cve-2024-26267 2026-10-05T13:26:25.574428+00:00

In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property `http.header.version.verbosity` is set to `full`, which allows remote attackers to easily identify the version of the application that is running and the vulnerabilities that affect that version via 'Liferay-Portal` response header.

 https://cve.radiocsirt.org/vuln/ghsa-2mvj-q2q3-wxjv GHSA-2mvj-q2q3-wxjv — Liferay Portal and Liferay DXP HTTP Header Can Expose Versions 2026-10-05T13:26:25.574489+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property `http.header.version.verbosity` is set to `full`, which allows remote attackers to easily identify the version of the application that is running and the vulnerabilities that affect that version via 'Liferay-Portal` response header.

 https://cve.radiocsirt.org/vuln/gsd-2024-26267 gsd-2024-26267 2026-10-05T13:26:25.574544+00:00 gsd-2024-26267 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440 WID-SEC-W-2024-0440 — Liferay Portal und Liferay DXP: Mehrere Schwachstellen 2026-10-05T13:26:25.574569+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.