DotNetNuke (DNN), a widely used open-source content management system (CMS) built on the .NET framework, has a critical vulnerability. This flaw, CVE-2025-52488, allows attackers to hijack NTLM through a Unicode normalization bypass. This can lead to the theft of sensitive credentials, potentially compromising the entire web platform. Let’s dive into the details of this vulnerability […]
The post NTLM Hijack: DNN Users Urged to Patch Critical Unicode Flaw appeared first on SecPod Blog.