https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T20:39:57.936576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-62979 cnvd-2021-62979 2026-10-22T20:39:57.940018+00:00 cnvd-2021-62979 https://cve.radiocsirt.org/vuln/euvd-2026-28420 EUVD-2026-28420 2026-10-22T20:39:57.940052+00:00 EUVD-2026-28420 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33335 fkie_cve-2021-33335 2026-10-22T20:39:57.940067+00:00

Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by editing the company administrator user.

 https://cve.radiocsirt.org/vuln/ghsa-5gh9-g62h-f35m GHSA-5gh9-g62h-f35m — Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers 2026-10-22T20:39:57.940096+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by editing the company administrator user.

 https://cve.radiocsirt.org/vuln/gsd-2021-33335 gsd-2021-33335 2026-10-22T20:39:57.940122+00:00 gsd-2021-33335