Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased if the scripts are run by a power user. Version 10.2.2 patches the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-40321 DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially… https://www.cve.org/CVERecord?id=CVE-2026-40321
Post summary
CVE-2026-40321 affects DNN before version 10.2.2, allowing a user to upload a specially crafted file; upgrading to 10.2.2 mitigates the issue.
In this episode of Prime Cyber Insights, we break down a series of high-impact vulnerabilities and breaches that signal a changing of the guard in cybersecurity defense and offense. We lead with the disclosure of CVE-2026-40321, a critical cross-site scripting flaw in the https://t.co/9ANap5Whkt
Post summary
The tweet discloses CVE-2026-40321, a critical cross‑site scripting vulnerability, and links to further details without providing exploitation or mitigation information.
⚠️ HIGH — CVE-2026-40321 DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to … CVSS 8.0 Full analysis → https://sec.kaitan.id/cves/CVE-2026-40321 #Microsoft #CyberSecurity #InfoSec
Post summary
The post announces a high‑severity vulnerability (CVE‑2026‑40321) in DNN/DotNetNuke with a CVSS score of 8.0 and links to a full analysis, offering no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dnnsoftware | dotnetnuke | - | - | - |