https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:35:59.595333+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-334689 EUVD-2026-334689 2026-10-09T05:35:59.659898+00:00 EUVD-2026-334689 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42126 fkie_cve-2022-42126 2026-10-09T05:35:59.659941+00:00

The Asset Libraries module in Liferay Portal 7.3.5 through 7.4.3.28, and Liferay DXP 7.3 before update 8, and DXP 7.4 before update 29 does not properly check permissions of asset libraries, which allows remote authenticated users to view asset libraries via the UI.

 https://cve.radiocsirt.org/vuln/ghsa-642h-mx8q-47p2 GHSA-642h-mx8q-47p2 — Missing permissions check in Liferay Portal 2026-10-09T05:35:59.659976+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

The Asset Libraries module in Liferay Portal 7.3.5 through 7.4.3.28, and Liferay DXP 7.3 before update 8, and DXP 7.4 before update 29 does not properly check permissions of asset libraries, which allows remote authenticated users to view asset libraries via the UI.

 https://cve.radiocsirt.org/vuln/gsd-2022-42126 gsd-2022-42126 2026-10-09T05:35:59.660001+00:00 gsd-2022-42126