https://patchfirst.co/vendor/dotnetnuke-dnn/New and newly exploited DotNetNuke (DNN) CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2017-9822/CVE-2017-9822#kevWed, 03 Nov 2021 00:00:00 GMTDotNetNuke (DNN) · DotNetNuke (DNN). In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.8% (higher than 99.86% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1496 Resource Hijacking. Priority 79.1 of 100.kevransomwarepublic-exploitT1190T1059T1496https://patchfirst.co/cve/CVE-2018-15811/CVE-2018-15811#kevWed, 03 Nov 2021 00:00:00 GMTDotNetNuke (DNN) · DotNetNuke (DNN). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 76.3% (higher than 99.54% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 68.2 of 100.kevpublic-exploithttps://patchfirst.co/cve/CVE-2018-18325/CVE-2018-18325#kevWed, 03 Nov 2021 00:00:00 GMTDotNetNuke (DNN) · DotNetNuke (DNN). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 74.0% (higher than 99.48% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1040 Network Sniffing. Priority 68.1 of 100.kevpublic-exploitT1190T1040