https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:20:06.548638+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0766 certfr-2025-avi-0766 — De multiples vulnérabilités ont été découvertes dans dans les produits Liferay. Certaines d'entre elles permettent à un… 2026-10-08T14:20:06.551835+00:00 certfr-2025-avi-0766 https://cve.radiocsirt.org/vuln/euvd-2026-252246 EUVD-2026-252246 2026-10-08T14:20:06.551872+00:00 EUVD-2026-252246 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43777 fkie_cve-2025-43777 2026-10-08T14:20:06.551887+00:00

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 exposes "Internal Server Error" in the response body when a login attempt is made with a deleted Client Secret.

 https://cve.radiocsirt.org/vuln/ghsa-9vwq-j6gq-w9xh GHSA-9vwq-j6gq-w9xh — Liferay Portal exposes 500 status when attempting login with a deleted client secret 2026-10-08T14:20:06.551917+00:00

Affected: Maven: com.liferay:com.liferay.portal.security.sso.openid.connect.impl

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 exposes "Internal Server Error" in the response body when a login attempt is made with a deleted Client Secret.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1990 WID-SEC-W-2025-1990 — Liferay Portal: Mehrere Schwachstellen 2026-10-08T14:20:06.551952+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen oder einen Cross Site Scripting Angriff durchzuführen.