Skip to content
OpenAdvisories

Vendor

pi-hole

38 known vulnerabilities.

Products

web 11 pi-hole 9 FTL 8 AdminLTE 7 pi-hole/adminlte 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2025-34087 Public exploit

    Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution

    An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3. When adding a domain to the allowlist via the web interface, the domain parameter is not properly sanitized, allowing an attacker to append OS commands to the domain string…

    pi-hole web