https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T09:22:07.138854+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0718 certfr-2025-avi-0718 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Certaines d'entre elles permettent à un atta… 2026-10-09T09:22:07.189731+00:00 certfr-2025-avi-0718 https://cve.radiocsirt.org/vuln/euvd-2026-250411 EUVD-2026-250411 2026-10-09T09:22:07.189776+00:00 EUVD-2026-250411 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43747 fkie_cve-2025-43747 2026-10-09T09:22:07.189792+00:00

A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure domain validation on analytics.cloud.domain.allowed, allowing an attacker to perform requests by change the domain and bypassing the validation method, this insecure validation is not distinguishing between trusted subdomains and malicious domains.

 https://cve.radiocsirt.org/vuln/ghsa-7gq9-6fw6-w5q3 GHSA-7gq9-6fw6-w5q3 2026-10-09T09:22:07.189823+00:00

A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure domain validation on analytics.cloud.domain.allowed, allowing an attacker to perform requests by change the domain and bypassing the validation method, this insecure validation is not distinguishing between trusted subdomains and malicious domains.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1894 WID-SEC-W-2025-1894 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-09T09:22:07.189839+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.