https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:45:47.472098+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-09T05:45:47.475520+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-250401 EUVD-2026-250401 2026-10-09T05:45:47.475558+00:00 EUVD-2026-250401 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43754 fkie_cve-2025-43754 2026-10-09T05:45:47.475573+00:00

Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows attackers to determine if an account exist in the application by inspecting the server processing time of the login request.

 https://cve.radiocsirt.org/vuln/ghsa-x7p4-v8mj-6fxx GHSA-x7p4-v8mj-6fxx — Liferay Portal Username Enumeration Vulnerability 2026-10-09T05:45:47.475602+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows attackers to determine if an account exist in the application by inspecting the server processing time of the login request.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1894 WID-SEC-W-2025-1894 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-09T05:45:47.475626+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.