https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:42:23.740874+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-272666 EUVD-2026-272666 2026-10-17T15:42:23.743568+00:00 EUVD-2026-272666 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3594 fkie_cve-2025-3594 2026-10-17T15:42:23.743600+00:00

Path traversal vulnerability with the downloading and installation of Xuggler in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 34, and older unsupported versions allows remote attackers to (1) add files to arbitrary locations on the server and (2) download and execute arbitrary files from the download server via the `_com_liferay_server_admin_web_portlet_ServerAdminPortlet_jarName` parameter.

 https://cve.radiocsirt.org/vuln/ghsa-p73j-gpcq-49h8 GHSA-p73j-gpcq-49h8 — Liferay Portal path traversal vulnerability with the downloading and installation of Xuggler 2026-10-17T15:42:23.743631+00:00

Affected: Maven: com.liferay:com.liferay.server.admin.web

Path traversal vulnerability with the downloading and installation of Xuggler in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 34, and older unsupported versions allows remote attackers to (1) add files to arbitrary locations on the server and (2) download and execute arbitrary files from the download server via the `_com_liferay_server_admin_web_portlet_ServerAdminPortlet_jarName` parameter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1336 WID-SEC-W-2025-1336 — Liferay Liferay DXP: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-17T15:42:23.743659+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Denial of Service Angriff durchzuführen.