Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-40306 EUVD-2026-23556GHSA-2rhw-gw3f-477j

DNN has same HostGUID for all new installs

Published Apr 17, 2026 · Updated Apr 20, 2026 · Assigned by GitHub_M

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue.

Affected products

VendorProductAffectedFixed
dnnsoftware Dnn.Platform >= 10.0.0, < 10.2.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet DotNetNuke.Core >= 10.0.0, < 10.2.2 10.2.2 GHSA-2rhw-gw3f-477j

References