CVE-2018-9126

CVE-2018-9126 is a critical directory traversal vulnerability affecting the DNNArticle module 11 for DNN (formerly DotNetNuke). An unauthenticated remote attacker can exploit this flaw by requesting the /GetCSS.ashx/?CP=%2fweb.config URI, allowing them to read the web.config file. This exposure can lead to the discovery of sensitive database credentials, posing a severe risk to data confidentiality, integrity, and availability. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required. The potential impact is high across all three security pillars (confidentiality, integrity, and availability), as an attacker could gain full control over the database. The EPSS score of 0.75256 further indicates a high likelihood of exploitation. While not listed in CISA's KEV catalog, exploit code for this vulnerability is publicly available on ExploitDB (EDB-44414). Despite the high severity and public exploit, there is currently no evidence of active exploitation, and it has received minimal community discussion or media coverage.