https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:33:25.468933+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0232 certfr-2025-avi-0232 — Une vulnérabilité a été découverte dans Liferay. Elle permet à un attaquant de provoquer une atteinte à la confidential… 2026-10-07T13:33:25.472282+00:00 certfr-2025-avi-0232 https://cve.radiocsirt.org/vuln/euvd-2026-225777 EUVD-2026-225777 2026-10-07T13:33:25.472317+00:00 EUVD-2026-225777 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2565 fkie_cve-2025-2565 2026-10-07T13:33:25.472332+00:00

The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92 allows an unauthorized user to obtain entry data from forms.

 https://cve.radiocsirt.org/vuln/ghsa-9fcg-wrp8-qhr4 GHSA-9fcg-wrp8-qhr4 — Liferay Portal and Liferay DXP Reveals Data via Forms 2026-10-07T13:33:25.472359+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92 allows an unauthorized user to obtain entry data from forms.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0611 WID-SEC-W-2025-0611 — Liferay Portal und Liferay DXP: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-07T13:33:25.472387+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen.