PT-2026-32982 · Dnn · Dnn

Published 2026-04-10 · Updated 2026-04-18 · CVE-2026-40306

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions DNN versions 10.x.x through 10.2.1

Description All new installations of the open-source web content management platform (CMS) in the Microsoft ecosystem are configured with the same Host GUID. This issue does not affect upgrades from version 9.x.x.

Recommendations Update to version 10.2.2.

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2026-40306

GHSA-2RHW-GW3F-477J

Affected Products

Dnn

References · 6

• https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2rhw-gw3f-477j · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2rhw-gw3f-477j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40306 · Security Note
• https://github.com/dnnsoftware/Dnn.Platform · Note
• https://github.com/dnnsoftware/Dnn.Platform/releases/tag/v10.2.2 · Note
• https://twitter.com/CVEnew/status/2045467385700688300 · Twitter Post