{"id":"EUVD-2026-23556","enisaUuid":"a6ea032e-a15e-3b78-a223-a30ddffd45ee","description":"DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue.","datePublished":"Apr 17, 2026, 9:09:30 PM","dateUpdated":"Apr 20, 2026, 4:18:27 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2rhw-gw3f-477j\nhttps://github.com/dnnsoftware/Dnn.Platform/releases/tag/v10.2.2\n","aliases":"CVE-2026-40306\nGHSA-2rhw-gw3f-477j\n","assigner":"GitHub_M","epss":0.18,"enisaIdProduct":[{"id":"c8f99871-aefb-306c-b7eb-df4bd6d766ad","product":{"name":"Dnn.Platform","vendor":{"name":"DNNSoftware"}},"product_version":"10.0.0, \u003c 10.2.2"}],"enisaIdVendor":[{"id":"c124977f-4bba-336b-b931-00ab8230a99a","vendor":{"name":"DNNSoftware"}}],"enisaIdVulnerability":[{"id":"782c2d5c-0be8-38fe-8ce2-e73997f9fd4d","vulnerability":{"id":"GHSA-2rhw-gw3f-477j","description":"DNN: Same HostGUID for all new installs","datePublished":"Apr 10, 2026, 9:07:13 PM","dateUpdated":"Apr 24, 2026, 8:50:16 PM","baseScore":0.0,"references":"https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2rhw-gw3f-477j\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-40306\nhttps://github.com/dnnsoftware/Dnn.Platform\nhttps://github.com/dnnsoftware/Dnn.Platform/releases/tag/v10.2.2\n","enisa_id":"EUVD-2026-23556\n","aliases":"CVE-2026-40306\nGHSA-2rhw-gw3f-477j\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"98d8c156-92d3-330a-b717-53073409947f","vulnerability":{"id":"CVE-2026-40306","description":"DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue.","datePublished":"Apr 17, 2026, 9:09:30 PM","dateUpdated":"Apr 20, 2026, 4:18:27 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2rhw-gw3f-477j\nhttps://github.com/dnnsoftware/Dnn.Platform/releases/tag/v10.2.2\n","enisa_id":"EUVD-2026-23556\n","assigner":"GitHub_M","epss":0.18,"dataProcessed":"Oct 27, 2026, 7:16:42 AM","vulnerabilityProduct":[{"id":"0dfaa58d-a1bc-3052-93e6-75b32aab94e6","product":{"name":"Dnn.Platform","vendor":{"name":"DNNSoftware"}},"product_version":"10.0.0, \u003c 10.2.2"}],"vulnerabilityVendor":[{"id":"ba79dc9c-dd4a-3008-b210-1ee2de68f253","vendor":{"name":"DNNSoftware"}}]}}],"enisaIdAdvisory":[]}