https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:29:52.355411+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0932 certfr-2025-avi-0932 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-02T15:29:52.478944+00:00 certfr-2025-avi-0932 https://cve.radiocsirt.org/vuln/euvd-2026-257015 EUVD-2026-257015 2026-10-02T15:29:52.478979+00:00 EUVD-2026-257015 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62258 fkie_cve-2025-62258 2026-10-02T15:29:52.478993+00:00

CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to execute any Headless API via the `endpoint` parameter.

 https://cve.radiocsirt.org/vuln/ghsa-gh4w-8qgq-8w9r GHSA-gh4w-8qgq-8w9r — Liferay Portal Vulnerable to CSRF in Headless APIs 2026-10-02T15:29:52.479019+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to execute any Headless API via the `endpoint` parameter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419 WID-SEC-W-2025-2419 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-02T15:29:52.479042+00:00

Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.