Skip to content
OpenAdvisories

Product · pi-hole

web

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.9
    CVE-2026-33765

    Pi-hole Web Interface has a Command Injection Vulnerability

    Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions prior to 6.0 have a critical OS Command Injection vulnerability in the savesettings.php file. The application takes the use…

    pi-hole web
  • High 8.2
    CVE-2025-59151

    Pi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection

    Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface before 6.3 is vulnerable to Carriage Return Line Feed (CRLF) injection. When a request is made to…

    pi-hole web