CVE-2026-40305 — DNN (formerly DotNetNuke) is an open-source web content
Image via images.unsplash.com
CVE-2026-40305 — DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version 10.2.2, in the friends feature, a user could craft a request that would force the acceptance of a friend request on another us
What This Means For You
- If your environment is affected by CWE-285, review your exposure and prioritize patching based on your environment. Monitor vendor advisories for CVE-2026-40305 updates and patches.
Related ATT&CK Techniques
🛡️ Detection Rules
2 rules · 6 SIEM formats2 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.
CVE-2026-40305 DNN Friends Feature Exploitation Attempt
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-40305 | vulnerability | CVE-2026-40305 |
| CWE-285 | weakness | CWE-285 |
Written by SCW Vulnerability Desk
Source & Attribution
| Source Platform | NVD |
| Channel | National Vulnerability Database |
| Published | April 18, 2026 at 01:16 UTC |
This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.
Believe this infringes your rights? Submit a takedown request.
Related Posts
ChurchCRM Flaw: Data Deletion Via CSRF
CVE-2026-40581 — ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the family record deletion endpoint (SelectDelete.php) performs permanent, irreversible deletion of...
CVE-2026-40485 — ChurchCRM is an open-source church management system. In
CVE-2026-40485 — ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the public API login endpoint (/api/public/user/login) returns distinguishable HTTP response codes...
ChurchCRM RCE: Unauthenticated Admin Exploit via Backup Restore
CVE-2026-40484 — ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backup restore functionality extracts uploaded archive contents and copies...