https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:46:09.483335+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0800 certfr-2025-avi-0800 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-04T18:46:09.542047+00:00 certfr-2025-avi-0800 https://cve.radiocsirt.org/vuln/euvd-2026-252866 EUVD-2026-252866 2026-10-04T18:46:09.542088+00:00 EUVD-2026-252866 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43805 fkie_cve-2025-43805 2026-10-04T18:46:09.542104+00:00

Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template, which allows remote attackers to view display page templates via crafted URLs.

 https://cve.radiocsirt.org/vuln/ghsa-5pp7-m8x8-rc82 GHSA-5pp7-m8x8-rc82 — Liferay Portal allows remote attackers to view display page templates via crafted URLs 2026-10-04T18:46:09.542132+00:00

Affected: Maven: com.liferay:com.liferay.asset.display.page.service

Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template, which allows remote attackers to view display page templates via crafted URLs.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2076 WID-SEC-W-2025-2076 — Liferay Portal: Mehrere Schwachstellen 2026-10-04T18:46:09.542164+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Denial of Service oder Cross Site Scripting Angriff durchzuführen und Informationen offenzulegen.