CVE-2017-9822: DotNetNuke (DNN) Remote Code Execution Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 94.8% chance of exploitation in the next 30 days.

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."

Affected products

• Dnnsoftware DotNetNuke: before 9.1.1 (fixed in 9.1.1)

Published 2017-07-20. Last modified 2026-06-17.