pi-hole web vulnerabilities
10 published CVEs name pi-hole web among the affected products.
- 10Published CVEs10 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-33405
Pi-hole has a Stored HTML Injection in queries.js
pi-hole · web
Low3.1 - CVE-2026-33406
Pi-hole has a Stored HTML attribute injection
pi-hole · web
Medium5.4 - CVE-2026-33404
Pi-hole has a Stored XSS / HTML injection in the Network page/Dashboard
pi-hole · web
Low3.4 - CVE-2026-33403
Pi-hole has a Reflected XSS / HTML injection in taillog.js
pi-hole · web
Medium6.1 - CVE-2026-33765
Pi-hole Web Interface has a Command Injection Vulnerability
pi-hole · web
High8.9 - CVE-2026-26953
Pi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions Table
pi-hole · web
Medium5.4 - CVE-2026-26952
Pi-hole Web Interface has Stored HTML Injection via Local DNS Records (CNAME/Hosts) in data-tag Attribute
pi-hole · web
Medium5.4 - CVE-2025-59151
Pi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection
pi-hole · web
High8.2 - CVE-2025-53533
Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page
pi-hole · web
Medium5.1 - CVE-2025-32785
Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)
pi-hole · web
Low2.0