https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T09:34:49.133846+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0748 certfr-2025-avi-0748 — Une vulnérabilité a été découverte dans Liferay. Elle permet à un attaquant de provoquer un contournement de la politiq… 2026-10-27T09:34:49.138170+00:00 certfr-2025-avi-0748 https://cve.radiocsirt.org/vuln/euvd-2026-251489 EUVD-2026-251489 2026-10-27T09:34:49.138207+00:00 EUVD-2026-251489 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43773 fkie_cve-2025-43773 2026-10-27T09:34:49.138221+00:00

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security vulnerability that allowing for improper access through the expandoTableLocalService.

 https://cve.radiocsirt.org/vuln/ghsa-876g-49r6-33qj GHSA-876g-49r6-33qj — Liferay Portal allows improper access through the expandoTableLocalService 2026-10-27T09:34:49.138248+00:00

Affected: Maven: com.liferay:com.liferay.portal.workflow.kaleo.runtime.impl

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security vulnerability that allowing for improper access through the expandoTableLocalService.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1935 WID-SEC-W-2025-1935 — Liferay Portal: Schwachstelle ermöglicht das Umgehen von Sicherheitsmaßnahmen 2026-10-27T09:34:49.138272+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Liferay Portal und Liferay DXP ausnutzen, um Sicherheitsmaßnahmen zu umgehen.