Priority CRITICAL 91KEV
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.78336 · Published 2020-05-29 · No fix listed CWE-78
Priority HIGH 78
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.78262 · Published 2020-05-11 · No fix listed CWE-434
Priority HIGH 73
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00257 · Published 2026-07-14 · Fixed in 6.4.3 CWE-282
Priority HIGH 73
Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00293 · Published 2026-06-10 · Fixed in 6.6.1 CWE-362
Priority HIGH 73
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00132 · Published 2026-05-11 · Fixed in 6.4.2 CWE-15
Priority HIGH 73
Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00956 · Published 2026-05-05 · Fixed in 6.6.1 CWE-93
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00713 · Published 2026-04-07 · Fixed in 6.6 CWE-78
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00713 · Published 2026-04-07 · Fixed in 6.6 CWE-78
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00547 · Published 2026-04-07 · Fixed in 6.6 CWE-78
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00713 · Published 2026-04-07 · Fixed in 6.6 CWE-78
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00874 · Published 2026-04-07 · Fixed in 6.6 CWE-78
Priority HIGH 73
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02828 · Published 2024-07-05 · Fixed in 5.18.3 CWE-918
Priority HIGH 73
Pi-hole®'s Web interface (based off of AdminLTE) provides a central location to manage your Pi-hole.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0098 · Published 2023-01-26 · No fix listed CWE-613
Priority HIGH 72
Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.60181 · Published 2021-08-04 · Fixed in 5.5.1 CWE-94
Priority HIGH 69
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00228 · Published 2026-10-30 · Fixed in 6.5 CWE-78
Priority HIGH 69
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00436 · Published 2025-10-27 · Fixed in 6.3 CWE-113
Priority HIGH 68
The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.01414 · Published 2024-03-27 · No fix listed CWE-200
Priority MEDIUM 63
Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.42251 · Published 2022-12-22 · Fixed in 5.17 CWE-284
Priority MEDIUM 60
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00162 · Published 2026-04-07 · Fixed in 6.6 CWE-863
Priority MEDIUM 60
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00263 · Published 2026-04-06 · Fixed in 6.5 CWE-79
Priority MEDIUM 60
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0015 · Published 2026-04-06 · Fixed in 6.5 CWE-79
Priority MEDIUM 60
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00195 · Published 2026-04-06 · Fixed in 6.5 CWE-79
Priority MEDIUM 57
An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3.
CVSS 4.0CRITICAL 9.0· Network · Low privileges · No interaction · EPSS 0.07039 · Published 2025-07-03 · No fix listed CWE-78
Priority MEDIUM 56
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00591 · Published 2025-10-27 · Fixed in 6.3 CWE-79
Priority MEDIUM 55
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00178 · Published 2026-04-06 · Fixed in 6.5 CWE-79
Load more
THREATIST.IORead the docs