Browse CVEs

HIGH 8.8 CVE-2026-50130 Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with cod… Pi Hole 6.4.3+ Fix from $1,9502026-07-14 HIGH 8.8 CVE-2026-39849 Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. In versions before 6.6.1, the `dns.interface` configur… Ftldns Patch available Fix from $1,9502026-05-05 HIGH 8.8 CVE-2026-35517 FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL en… Ftldns after 6.5 Fix from $1,9502026-04-07 HIGH 8.8 CVE-2026-35518 FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL en… Ftldns after 6.5 Fix from $1,9502026-04-07 HIGH 8.8 CVE-2026-35519 FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL en… Ftldns after 6.5 Fix from $1,9502026-04-07 HIGH 8.8 CVE-2026-35520 FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL en… Ftldns after 6.5 Fix from $1,9502026-04-07 HIGH 8.8 CVE-2026-35521 FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL en… Ftldns after 6.5 Fix from $1,9502026-04-07 MEDIUM 6.1 CVE-2026-35491 FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, Pi-hole FTL suppor… Ftldns 6.6+ Fix from $1,6002026-04-07 MEDIUM 6.7 CVE-2026-33727 Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privilege-escalation vulnerability … Pi Hole Mitigation only Fix from $1,6002026-04-06 MEDIUM 6.1 CVE-2026-33403 Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5… Web Interface after 6.4.1 Fix from $1,6002026-04-06 MEDIUM 6.1 CVE-2026-33404 Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5… Web Interface after 6.4.1 Fix from $1,6002026-04-06 MEDIUM 6.1 CVE-2026-33406 Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5… Web Interface after 6.4.1 Fix from $1,6002026-04-06 CRITICAL 9.8 CVE-2026-33765 Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions prior to 6.0 … Web Interface 6.0+ Fix from $2,3002026-03-27 MEDIUM 5.4 CVE-2026-26952 Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions 6.4 and below… Web Interface 6.4.1+ Fix from $1,6002026-02-19 MEDIUM 5.4 CVE-2026-26953 Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions 6.0 and abov… Web Interface 6.4.1+ Fix from $1,6002026-02-19 HIGH 8.2 CVE-2025-59151 Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Adm… Web Interface 6.3+ Fix from $1,9502025-10-27 MEDIUM 6.1 CVE-2025-53533 Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Adm… Web Interface 6.3+ Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-32785 Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Adm… Web Interface 6.3+ Fix from $1,6002025-10-27 HIGH 8.8 CVE-2025-34087 An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3. When adding a domain to the allowlist via the web interface, t… Pi Hole after 3.3 Fix from $1,9502025-07-03 HIGH 7.5 CVE-2024-44069 Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dashboard. NOTE: the supplier rep… Pi Hole 6.0+ Fix from $1,9502024-08-19 HIGH 8.8 CVE-2024-34361 Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior … Pi Hole 5.18.3+ Fix from $1,9502024-07-05 MEDIUM 6.5 CVE-2024-28247 The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. A vulnerability has been … Pi Hole 5.18+ Fix from $1,6002024-03-27 HIGH 8.8 CVE-2023-23614 Pi-hole®'s Web interface (based off of AdminLTE) provides a central location to manage your Pi-hole. Versions 4.0 and above, prior to 5.18.3 are vuln… Web Interface 5.18.3+ Fix from $1,9502023-01-26 MEDIUM 5.3 CVE-2022-23513EPSS 40% Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the thre… Adminlte after 5.17 Fix from $1,6002022-12-23 MEDIUM 5.4 CVE-2021-41175 Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior … Web Interface 5.8+ Fix from $1,6002021-10-26 MEDIUM 6.1 CVE-2021-3811 adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Web Interface 5.6+ Fix from $1,6002021-09-17 MEDIUM 6.1 CVE-2021-3812 adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Web Interface 5.6+ Fix from $1,6002021-09-17 HIGH 7.5 CVE-2021-3706 adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag Web Interface 5.6+ Fix from $1,9502021-09-15 HIGH 8.8 CVE-2021-32706EPSS 60% Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface ve… Pi Hole 5.5.1+ Fix from $1,9502021-08-04 HIGH 8.8 CVE-2021-29448 Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the Pi-hole Admin portal, which ca… Ftldns 5.5+ Fix from $1,9502021-04-15