DNN: Same HostGUID for all new installs

MEDIUM 6.5CVE-2026-40306 · GHSA-2rhw-gw3f-477j · Published 17/04/2026 · updated 26/10/2026

Package	Affected versions	Patched versions
DotNetNuke.Core NuGet	`≥ 10.0.0, < 10.2.2`	`10.2.2`
dotnetnuke dnnsoftware	`≥ 10.0.0, < 10.2.2`	`10.2.2`

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue.

NVD description

References

dnnsoftware/Dnn.Platform security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-40306 · ADVISORY
dnnsoftware/Dnn.Platform · PACKAGE
dnnsoftware/Dnn.Platform release v10.2.2 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free