pi-hole vulnerabilities
37 published CVEs name pi-hole among the affected products.
- 37Published CVEs37 of them scored
- 21Last 12 monthspublished in the last year
- 0Critical20 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119336
Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink
pi-hole · pi-hole
High7.8 - CVE-2026-119335
Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass
pi-hole · pi-hole
High7.8 - CVE-2026-119334
Pi-hole: file:// adlist read check and curl can resolve different files
pi-hole · pi-hole
Low2.2 - CVE-2026-50130
Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`
pi-hole · pi-hole
High8.8 - CVE-2026-44693
Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer
pi-hole · FTL
High8.8 - CVE-2026-41489
Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks
pi-hole · pi-hole
High8.8 - CVE-2026-39849
Pi-hole FTL remote code execution via newline injection in dns.interface configuration
pi-hole · FTL
High8.7 - CVE-2026-35521
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection
pi-hole · FTL
High8.8 - CVE-2026-35520
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection
pi-hole · FTL
High8.8 - CVE-2026-35519
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection
pi-hole · FTL
High8.8