https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:49:30.984112+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-03T09:49:30.988042+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-256732 EUVD-2026-256732 2026-10-03T09:49:30.988081+00:00 EUVD-2026-256732 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62247 fkie_cve-2025-62247 2026-10-03T09:49:30.988096+00:00

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 allows instance users to read and select unauthorized Blueprints through the Collection Providers across instances.

 https://cve.radiocsirt.org/vuln/ghsa-cqwv-9xh5-25fg GHSA-cqwv-9xh5-25fg — Liferay Portal and DXP are Missing Authorization in Collection Provider 2026-10-03T09:49:30.988124+00:00

Affected: Maven: com.liferay:com.liferay.search.experiences.service

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 allows instance users to read and select unauthorized Blueprints through the Collection Providers across instances.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2393 WID-SEC-W-2025-2393 — Liferay Portal: Mehrere Schwachstellen 2026-10-03T09:49:30.988148+00:00

Ein Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.