https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T14:21:20.515842+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-334635 EUVD-2026-334635 2026-10-22T14:21:20.594230+00:00 EUVD-2026-334635 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38512 fkie_cve-2022-38512 2026-10-22T14:21:20.594271+00:00

The Translation module in Liferay Portal v7.4.3.12 through v7.4.3.36, and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page's XLIFF translation file via crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-h9ww-wjg4-jvvg GHSA-h9ww-wjg4-jvvg — Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module 2026-10-22T14:21:20.594306+00:00

Affected: Maven: com.liferay:com.liferay.translation.web, Maven: com.liferay.portal:release.dxp.bom

The Translation module before v2.0.58 from Liferay Portal (v7.4.3.12 through v7.4.3.36), and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page's XLIFF translation file via crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2022-38512 gsd-2022-38512 2026-10-22T14:21:20.594335+00:00 gsd-2022-38512