MEDIUM6.5

GHSA-2rhw-gw3f-477j

DNN: Same HostGUID for all new installs

Quick fix

GHSA-2rhw-gw3f-477j — DotNetNuke.Core: upgrade to the fixed version with the command below.

dotnet add package DotNetNuke.Core --version 10.2.2

Details

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/DotNetNuke.Core

Introduced in: 10.0.0Fixed in: 10.2.2

Fixdotnet add package DotNetNuke.Core --version 10.2.2

References

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2rhw-gw3f-477j[WEB]
https://nvd.nist.gov/vuln/detail/CVE-2026-40306[ADVISORY]
https://github.com/dnnsoftware/Dnn.Platform[PACKAGE]
https://github.com/dnnsoftware/Dnn.Platform/releases/tag/v10.2.2[WEB]