https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:42:19.175561+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244307 EUVD-2026-244307 2026-10-17T15:42:19.178402+00:00 EUVD-2026-244307 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3526 fkie_cve-2025-3526 2026-10-17T15:42:19.178449+00:00

SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 25, and older unsupported versions does not restrict the saving of request parameters in the HTTP session, which allows remote attackers to consume system memory leading to denial-of-service (DoS) conditions via crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/ghsa-mf3r-6m25-3867 GHSA-mf3r-6m25-3867 — Liferay Portal SessionClicks does not restrict the saving of request parameters in the HTTP session 2026-10-17T15:42:19.178486+00:00

Affected: Maven: com.liferay.portal:com.liferay.portal.kernel

SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 25, and older unsupported versions does not restrict the saving of request parameters in the HTTP session, which allows remote attackers to consume system memory leading to denial-of-service (DoS) conditions via crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1336 WID-SEC-W-2025-1336 — Liferay Liferay DXP: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-17T15:42:19.178512+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Denial of Service Angriff durchzuführen.