Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

DotNetNuke (DNN) Remote Code Execution Vulnerability

DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization. CISA required action: Apply updates per vendor instructions.

DotNetNuke (DNN)CVE-2017-9822

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-9822

DotNetNuke (DNN)

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-9822
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3545 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:37:23 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811. CISA required action: Apply updates per vendor instructions.

DotNetNuke (DNN)CVE-2018-18325

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-18325

DotNetNuke (DNN)

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-18325
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3543 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:37:21 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. CISA required action: Apply updates per vendor instructions.

DotNetNuke (DNN)CVE-2018-15811

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-15811

DotNetNuke (DNN)

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-15811
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3542 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:37:20 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement