https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T19:42:42.887338+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244306 EUVD-2026-244306 2026-10-17T19:42:42.890955+00:00 EUVD-2026-244306 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3602 fkie_cve-2025-3602 2026-10-17T19:42:42.890987+00:00

Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA through update 35, and 7.2 fix pack 8 through fix pack 20 does not limit the depth of a GraphQL queries, which allows remote attackers to perform denial-of-service (DoS) attacks on the application by executing complex queries.

 https://cve.radiocsirt.org/vuln/ghsa-8c26-xm99-53w7 GHSA-8c26-xm99-53w7 — Liferay Portal does not limit the depth of a GraphQL queries 2026-10-17T19:42:42.891017+00:00

Affected: Maven: com.liferay:com.liferay.portal.vulcan.impl

Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA through update 35, and 7.2 fix pack 8 through fix pack 20 does not limit the depth of a GraphQL queries, which allows remote attackers to perform denial-of-service (DoS) attacks on the application by executing complex queries.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1336 WID-SEC-W-2025-1336 — Liferay Liferay DXP: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-17T19:42:42.891041+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Denial of Service Angriff durchzuführen.