https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:23:09.327023+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 certfr-2025-avi-0793 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-04T08:23:09.330332+00:00 certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/euvd-2026-252791 EUVD-2026-252791 2026-10-04T08:23:09.330369+00:00 EUVD-2026-252791 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43797 fkie_cve-2025-43797 2026-10-04T08:23:09.330384+00:00

In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions, the default membership type of a newly created site is “Open” which allows any registered users to become a member of the site. A remote attacker with site membership can potentially view, add or edit content on the site.

 https://cve.radiocsirt.org/vuln/ghsa-25m3-w28p-v3v3 GHSA-25m3-w28p-v3v3 — Liferay has Insecure Default Initialization of Resource issue 2026-10-04T08:23:09.330461+00:00

Affected: Maven: com.liferay:com.liferay.site.admin.web

In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions, the default membership type of a newly created site is “Open” which allows any registered users to become a member of the site. A remote attacker with site membership can potentially view, add or edit content on the site.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2064 WID-SEC-W-2025-2064 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-04T08:23:09.330487+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.