CVE-2018-18326

PoC —

CVSS 3.1

7.5 high

EPSS

54%p99

Published

Jul 3, 2019 (Jul 3, 2019)

Modified

Jun 17, 2026

Description

DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.

Vendors: dnnsoftware
Products: dotnetnuke
Weakness: CWE-331
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (53.6%)

In the news0 stories

No ingested article mentions this CVE yet.