https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:21:06.584802+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 certfr-2025-avi-0793 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-04T08:21:06.588522+00:00 certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/euvd-2026-252794 EUVD-2026-252794 2026-10-04T08:21:06.588558+00:00 EUVD-2026-252794 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43798 fkie_cve-2025-43798 2026-10-04T08:21:06.588572+00:00

Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user.

 https://cve.radiocsirt.org/vuln/ghsa-4p5r-3jmm-652q GHSA-4p5r-3jmm-652q — Liferay DXP Missing Critical Step in Authentication 2026-10-04T08:21:06.588601+00:00

Affected: Maven: com.liferay:com.liferay.multi.factor.authentication.timebased.otp.web

Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2064 WID-SEC-W-2025-2064 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-04T08:21:06.588625+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.