MINI-7GC4-X27H-3526

Bulletin has no description...

CVE-2026-3526 File Access Fix (deprecated) - Moderately critical - Access bypass - SA-CONTRIB-2026-021

Incorrect Authorization vulnerability in Drupal File Access Fix deprecated allows Forceful Browsing.This issue affects File Access Fix deprecated: from 0.0.0 before 1.2.0...

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.131-2.b11.el7 (AXSA:2017-1623:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1623:02 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2017-3509 RESERVED This candidate has been reserved by an organization...

CVE-2025-3526

SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 25, and older unsupported versions does not restrict the saving of request parameters in the HTTP session, which allows remote attackers to consume system memory leading to...

com.liferay.portal:com.liferay.portal.impl (2.82.0) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (2.82.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.82.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.82.0 Source cves:...

com.liferay.portal:com.liferay.portal.impl (11.0.3) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (11.0.3)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 11.0.3 Source cves:...

com.liferay.portal:com.liferay.portal.test (11.1.0) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (11.1.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.test 11.1.0 Source cves:...

com.liferay.portal:com.liferay.portal.test (13.3.0) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (13.3.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 13.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.test 13.3.0 Source cves:...

com.liferay.portal:com.liferay.portal.impl (16.0.0), com.liferay.portal:com.liferay.portal.test (16.0.0) +2 more potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (16.0.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 16.0.0 -...

com.liferay.portal:com.liferay.portal.impl (7.0.0), com.liferay.portal:com.liferay.portal.test (7.0.0) +3 more potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (7.0.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 7.0.0 -...

com.liferay.portal:com.liferay.portal.impl (8.0.1), com.liferay.portal:com.liferay.util.bridges (8.0.1) +2 more potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (8.0.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 8.0.1 -...

com.liferay.portal:com.liferay.util.taglib (9.1.1) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (9.1.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 9.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.util.taglib 9.1.1 Source cves:...

com.liferay.portal:com.liferay.portal.impl (2.21.0), com.liferay:com.liferay.message.boards.web (1.2.9) +1 more potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (2.21.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.21.0 -...

com.liferay.portal:com.liferay.portal.impl (2.31.0), com.liferay:com.liferay.password.policies.admin.web (>=1.0.16, <=1.0.25) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (2.31.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.31.0 -...

com.liferay.portal:com.liferay.portal.impl (4.2.0), com.liferay.portal:com.liferay.portal.test (4.2.0) +2 more potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (4.2.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.2.0 -...

com.liferay.portal:com.liferay.portal.impl (4.2.1), com.liferay.portal:com.liferay.portal.test (4.2.1) +2 more potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (4.2.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.2.1 -...

com.liferay.portal:com.liferay.portal.impl (4.17.0) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (4.17.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.17.0 Source cves:...

com.liferay.portal:com.liferay.portal.impl (4.27.1) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (4.27.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.27.1 Source cves:...

com.liferay.portal:com.liferay.portal.impl (4.34.0) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (4.34.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.34.0 Source cves:...

com.liferay.portal:com.liferay.portal.impl (4.35.1) potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (4.35.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 4.35.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 4.35.1 Source cves:...