https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:28:09.954462+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-02T16:28:09.964861+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-257061 EUVD-2026-257061 2026-10-02T16:28:09.964896+00:00 EUVD-2026-257061 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62259 fkie_cve-2025-62259 2026-10-02T16:28:09.964911+00:00

Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit access to APIs before a user has verified their email address, which allows remote users to access and edit content via the API.

 https://cve.radiocsirt.org/vuln/ghsa-gv7w-jh8g-vr73 GHSA-gv7w-jh8g-vr73 — Liferay Portal Does Not Limit Access to APIs Before Email Verification 2026-10-02T16:28:09.964938+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit access to APIs before a user has verified their email address, which allows remote users to access and edit content via the API.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419 WID-SEC-W-2025-2419 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-02T16:28:09.964961+00:00

Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.