Skip to content
OpenAdvisories

Vendor

pi-hole

38 known vulnerabilities.

Products

web 11 pi-hole 9 FTL 8 AdminLTE 7 pi-hole/adminlte 3
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-35517 Public exploit

    Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection

    FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution (RCE) vulnerability in the upstream DNS servers configuration parameter …

    pi-hole FTL
  • High 8.6
    CVE-2024-34361 Public exploit

    Pi-hole Blind Server-Side Request Forgery (SSRF) vulnerability can lead to Remote Code Execution (RCE)

    Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior to 5.18.3 allows an authenticated user to make internal requests to the server via the `gravity_DownloadBlockl…

    pi-hole pi-hole
  • High 7.6
    CVE-2024-28247 Public exploit

    Pihole Authenticated Arbitrary File Read with root privileges

    The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. A vulnerability has been discovered in Pihole that allows an authenticated user on the platform to read internal server files arbitrari…

    pi-hole pi-hole
  • High 7.6
    CVE-2021-32706 Public exploit EPSS 60%

    (Authenticated) Remote Code Execution Possible in Web Interface 5.5

    Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the `validDomainWildcard` preg_match filter allows a malicious character through that can be used…

    pi-hole AdminLTE