CVE-2025-32036— DNN allows the possibility of bypassing Captcha
Quick assessment
Affected
dnnsoftware Dnn.Platform
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dnn.Platform是Dnn Software开源的一个开源网络内容管理平台（CMS）。 Dnn.Platform存在安全漏洞，该漏洞源于验证码生成算法复杂度低，容易被OCR工具识别。
Possible ATT&CK Techniques 1 AI
T1110 · Brute Force
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-32036
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
DNN allows the possibility of bypassing Captcha
Source: CVE Program / CVE List V5
Vulnerability Description
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. The algorithm used to generate the captcha image shows the least complexity of the desired image. For this reason, the created image can be easily read by OCR tools, and the intruder can send automatic requests by building a robot and using this tool. This vulnerability is fixed in 9.13.8.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
可猜测的验证码
Source: CVE Program / CVE List V5
Vulnerability Title
Dnn.Platform 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dnn.Platform是Dnn Software开源的一个开源网络内容管理平台（CMS）。 Dnn.Platform存在安全漏洞，该漏洞源于验证码生成算法复杂度低，容易被OCR工具识别。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| dnnsoftware | Dnn.Platform | < 9.13.8 | - |
|
II. Public POCs for CVE-2025-32036
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-32036
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Dnn.Platform
-
CVE-2026-40321
DotNetNuke.Core has stored cross-site-scripting (XSS) via SV -
CVE-2026-40306
DNN has same HostGUID for all new installs -
CVE-2026-40305
DNN has Force Friend Request Acceptance -
CVE-2026-24838
DotNetNuke.Core Vulnerable to Stored XSS via Module Title -
CVE-2026-24837
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion
Same vendor: dnnsoftware
-
CVE-2026-40321
DotNetNuke.Core has stored cross-site-scripting (XSS) via SV -
CVE-2026-40306
DNN has same HostGUID for all new installs -
CVE-2026-40305
DNN has Force Friend Request Acceptance -
CVE-2020-37103
DotNetNuke 9.5 - Persistent Cross-Site Scripting -
CVE-2026-24838
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
Same weakness: CWE-804
-
CVE-2024-23566
HCL Aftermarket EPC 授权问题漏洞 -
CVE-2024-23567
HCL Aftermarket EPC 授权问题漏洞 -
CVE-2026-49953
Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set -
CVE-2026-40935
WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Lengt -
CVE-2026-27411
WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypa
V. Comments for CVE-2025-32036
No comments yet