PT-2026-5041 · Dnn · Dnn

Mojav3R · Published 2026-01-27 · Updated 2026-02-02 · CVE-2026-24836

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DNN (formerly DotNetNuke) versions 9.0.0 through 9.13.9 DNN (formerly DotNetNuke) versions 10.0.0 through 10.1.9

Description DNN (formerly DotNetNuke) is an open-source web content management platform. Extensions could write rich text in log notes, potentially including scripts that execute within the PersonaBar when displayed.

Recommendations Update to version 9.13.10 or later. Update to version 10.2.0 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-24836

GHSA-2G5G-HCGH-Q3RP

Affected Products

Dnn

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24836.json · Exploit
• https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2g5g-hcgh-q3rp · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2g5g-hcgh-q3rp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24836 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24836 · Vendor Advisory
• https://github.com/dnnsoftware/Dnn.Platform · Note
• https://twitter.com/CVEnew/status/2016319521540170000 · Twitter Post
• https://twitter.com/cracbot/status/2018278273550287036 · Twitter Post
• https://t.me/cveNotify/150062 · Telegram Post