https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:53:57.247842+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-05T16:53:57.254333+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-158747 EUVD-2026-158747 2026-10-05T16:53:57.254380+00:00 EUVD-2026-158747 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26268 fkie_cve-2024-26268 2026-10-05T16:53:57.254396+00:00

User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.

 https://cve.radiocsirt.org/vuln/ghsa-qm43-g2xj-hvg5 GHSA-qm43-g2xj-hvg5 — Liferay Portal and Liferay DXP User Enumeration Vulnerability 2026-10-05T16:53:57.254431+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.

 https://cve.radiocsirt.org/vuln/gsd-2024-26268 gsd-2024-26268 2026-10-05T16:53:57.254461+00:00 gsd-2024-26268 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440 WID-SEC-W-2024-0440 — Liferay Portal und Liferay DXP: Mehrere Schwachstellen 2026-10-05T16:53:57.254487+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.