https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:44:08.838865+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0932 certfr-2025-avi-0932 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-03T21:44:08.892673+00:00 certfr-2025-avi-0932 https://cve.radiocsirt.org/vuln/euvd-2026-257017 EUVD-2026-257017 2026-10-03T21:44:08.892713+00:00 EUVD-2026-257017 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62260 fkie_cve-2025-62260 2026-10-03T21:44:08.892728+00:00

Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number of objects returned from Headless API requests, which allows remote attackers to perform denial-of-service (DoS) attacks on the application by executing a request that returns a large number of objects.

 https://cve.radiocsirt.org/vuln/ghsa-vgqx-447m-wvcj GHSA-vgqx-447m-wvcj — Liferay Portal Vulnerable to DoS via Crafted Headless API Request 2026-10-03T21:44:08.892758+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number of objects returned from Headless API requests, which allows remote attackers to perform denial-of-service (DoS) attacks on the application by executing a request that returns a large number of objects.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419 WID-SEC-W-2025-2419 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-03T21:44:08.892782+00:00

Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.