Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-05-03. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
@DanBilzerian Florida’s county election sites are built on VR Systems, and that stack has a documented critical-vulnerability history (one of the worst RCE track records in the CMS world; see CVE-2017-9822 & 2016 alleged GRU operation).
Post summary
The tweet references VR Systems’ known RCE history, specifically CVE‑2017‑9822, but offers no PoC, exploit code, patch guidance, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dnnsoftware | dotnetnuke | - | - | - |