https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:52:54.004186+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0940 certfr-2025-avi-0940 — Une vulnérabilité a été découverte dans Liferay. Elle permet à un attaquant de provoquer une atteinte à la confidential… 2026-10-04T06:52:54.048470+00:00 certfr-2025-avi-0940 https://cve.radiocsirt.org/vuln/euvd-2026-257233 EUVD-2026-257233 2026-10-04T06:52:54.048525+00:00 EUVD-2026-257233 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62257 fkie_cve-2025-62257 2026-10-04T06:52:54.048550+00:00

Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers to determine a user’s password even if account lockout is enabled via brute force attack.

 https://cve.radiocsirt.org/vuln/ghsa-8hw3-ghwv-crfh GHSA-8hw3-ghwv-crfh — Liferay Portal vulnerable to password enumeration 2026-10-04T06:52:54.048597+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers to determine a user’s password even if account lockout is enabled via brute force attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2446 WID-SEC-W-2025-2446 — Liferay Portal und DXP: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T06:52:54.048639+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen.