https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-40321.htmlhttps://patchthecve.com/cve/CVE-2026-40321.htmlMon, 26 Oct 2026 22:10:00 +0000HIGH 8.0: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increasedhttps://patchthecve.com/cve/CVE-2026-40306.htmlhttps://patchthecve.com/cve/CVE-2026-40306.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.5: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue.https://patchthecve.com/cve/CVE-2026-40305.htmlhttps://patchthecve.com/cve/CVE-2026-40305.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 4.3: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version 10.2.2, in the friends feature, a user could craft a request that would force the acceptance of a friend request on another user. Version 10.2.