Dnnsoftware Dotnetnuke vulnerabilities
76 published vulnerabilities in Dnnsoftware Dotnetnuke, 3 of them exploited in the wild. The most were published in 2025 (23), and 8 so far in 2026.
Dnnsoftware Dotnetnuke vulnerabilities by year
2004
2005
2006
2008
2009
2010
2012
2013
2015
2016
2017
2018
2019
2020
2021
2022
2025
2026
Most exploited Dnnsoftware Dotnetnuke vulnerabilities
- CVE-2017-9822 DotNetNuke (DNN) Remote Code Execution
- CVE-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength
- CVE-2018-18325 DotNetNuke (DNN) Inadequate Encryption Strength
- CVE-2025-64095 DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
- CVE-2006-3601 Privilege escalation in n/a
- CVE-2015-2794 The installation wizard in DotNetNuke (DNN) allows privilege escalation
- CVE-2026-24838 DotNetNuke.Core Vulnerable to Stored XSS via Module Title
- CVE-2025-59545 DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
- CVE-2025-52487 DNN.PLATFORM possibly allows bypass of IP Filters
- CVE-2020-5187 DNN Path Traversal via Zip Slip
- CVE-2025-52488 DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
- CVE-2026-40321 DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.