Priority HIGH 73
Pi-hole®'s Web interface (based off of AdminLTE) provides a central location to manage your Pi-hole.
Pi-hole
Records48All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9
Exploited now
Pi-hole records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
16 records in Web Interface · all components
TI-2025-36756 CVE-2025-59151
Pi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection
Priority HIGH 69
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application.
TI-2026-25803 CVE-2026-33406
Pi-hole has a Stored HTML attribute injection
Priority MEDIUM 60
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
Priority MEDIUM 60
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
Priority MEDIUM 60
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
TI-2025-33477 CVE-2025-53533
Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page
Priority MEDIUM 56
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application.
Priority MEDIUM 55
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
Priority MEDIUM 49
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
TI-2025-23822 CVE-2025-32785
Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)
Priority MEDIUM 44
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application.
TI-2021-10161 CVE-2021-29448
Stored DOM XSS in Pi-hole Admin Web Interface
Priority LOW 39
Pi-hole is a Linux network-level advertisement and Internet tracker blocking application.
TI-2021-02640 CVE-2021-3706 · GHSA-6x52-4rr6-8fw7
Sensitive Cookie Without 'HttpOnly' Flag in pi-hole/adminlte
Priority LOW 35
adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag
Priority LOW 34
Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS.
Priority LOW 28
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Priority LOW 28
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
TI-2026-21439 CVE-2026-26953
Pi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions Table
Priority LOW 24
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.
TI-2026-21438 CVE-2026-26952
Pi-hole Web Interface has Stored HTML Injection via Local DNS Records (CNAME/Hosts) in data-tag Attribute
Priority LOW 24
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.