Vendor

DotNetNuke (DNN)

As of , 3 DotNetNuke (DNN) vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2017-9822.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2017-9822Remote Code ExecutionDotNetNuke (DNN) DotNetNuke (DNN)Patch this weekRansomware use; Metasploit module; EPSS 0.95; verified Exploit-DB entry0.95
2CVE-2018-15811Inadequate Encryption StrengthDotNetNuke (DNN) DotNetNuke (DNN)Patch this weekMetasploit module; EPSS 0.76; verified Exploit-DB entry0.76
3CVE-2018-18325Inadequate Encryption StrengthDotNetNuke (DNN) DotNetNuke (DNN)Patch this weekMetasploit module; EPSS 0.74; verified Exploit-DB entry0.74

Added each year

1232021: 3320212022: nonenone20222023: nonenone20232024: nonenone20242025: nonenone20252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20213
2022none
2023none
2024none
2025none
2026none

Used in ransomware