https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:31:09.241357+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-397 certfr-2022-avi-397 — De multiples vulnérabilités ont été découvertes dans Liferay Portal. Elles permettent à un attaquant de provoquer un co… 2026-10-17T12:31:09.245114+00:00 certfr-2022-avi-397 https://cve.radiocsirt.org/vuln/euvd-2026-334503 EUVD-2026-334503 2026-10-17T12:31:09.245157+00:00 EUVD-2026-334503 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26595 fkie_cve-2022-26595 2026-10-17T12:31:09.245217+00:00

Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user's site membership assignment UI.

 https://cve.radiocsirt.org/vuln/ghsa-822f-jfpg-hg7h GHSA-822f-jfpg-hg7h — Liferay Portal and Liferay DXP fails to check permissions to view sites/groups 2026-10-17T12:31:09.245263+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom, Maven: com.liferay:com.liferay.site.browser.web, Maven: com.liferay.portal:com.liferay.portal.impl

Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user's site membership assignment UI.

 https://cve.radiocsirt.org/vuln/gsd-2022-26595 gsd-2022-26595 2026-10-17T12:31:09.245305+00:00 gsd-2022-26595