https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:04:54.998222+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-257118 EUVD-2026-257118 2026-10-03T10:04:55.001245+00:00 EUVD-2026-257118 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64095 fkie_cve-2025-64095 2026-10-03T10:04:55.001274+00:00

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads. This vulnerability is fixed in 10.1.1.

 https://cve.radiocsirt.org/vuln/ghsa-3m8r-w7xg-jqvw GHSA-3m8r-w7xg-jqvw — DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite 2026-10-03T10:04:55.001305+00:00

Affected: NuGet: DNN.PLATFORM

### Summary The default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files.

### Description An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2535 WID-SEC-W-2025-2535 — DNN: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T10:04:55.001330+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in DNN ausnutzen, um Sicherheitsvorkehrungen zu umgehen.