https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T15:23:45.539478+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-43216 EUVD-2026-43216 2026-10-18T15:23:45.549435+00:00 EUVD-2026-43216 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15842 fkie_cve-2020-15842 2026-10-18T15:23:45.549473+00:00

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.

 https://cve.radiocsirt.org/vuln/ghsa-mg3r-9jh8-33r9 GHSA-mg3r-9jh8-33r9 — Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability 2026-10-18T15:23:45.549506+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.

 https://cve.radiocsirt.org/vuln/gsd-2020-15842 gsd-2020-15842 2026-10-18T15:23:45.549533+00:00 gsd-2020-15842