https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T17:55:47.700069+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0675 certfr-2025-avi-0675 — Une vulnérabilité a été découverte dans Liferay. Elle permet à un attaquant de provoquer un déni de service à distance. 2026-10-15T17:55:47.702961+00:00 certfr-2025-avi-0675 https://cve.radiocsirt.org/vuln/euvd-2026-249582 EUVD-2026-249582 2026-10-15T17:55:47.702994+00:00 EUVD-2026-249582 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43736 fkie_cve-2025-43736 2026-10-15T17:55:47.703008+00:00

A Denial Of Service via File Upload (DOS) vulnerability in the Liferay Portal 7.4.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows a user to upload more than 300kb profile picture into the user profile. This size more than the noted max 300kb size. This extra amount of data can make Liferay slower.

 https://cve.radiocsirt.org/vuln/ghsa-cg99-m88x-422c GHSA-cg99-m88x-422c — Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability 2026-10-15T17:55:47.703035+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom, Maven: com.liferay:com.liferay.frontend.taglib, Maven: com.liferay:com.liferay.image.uploader.web, Maven: com.liferay:com.liferay.users.admin.web, Maven: com.liferay:com.liferay.account.admin.web

A Denial Of Service via File Upload (DOS) vulnerability in Liferay Portal 7.4.3.0 through 7.4.3.132, Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows a user to upload a profile picture of more than 300kb into a user profile. This size is more than the noted max 300kb size. This extra data can significantly slow down the Liferay service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1766 WID-SEC-W-2025-1766 — Liferay Portal und DXP: Schwachstelle ermöglicht Denial of Service 2026-10-15T17:55:47.703070+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in LiferayDXP und Liferay Portal ausnutzen, um einen Denial of Service Angriff durchzuführen.