TI-2026-28731 CVE-2026-39849
Pi-hole FTL remote code execution via newline injection in dns.interface configuration
Priority HIGH 73
Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker.
Vulnerabilities
8 records
TI-2026-27638 CVE-2026-35521
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
TI-2026-27637 CVE-2026-35520
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
TI-2026-27636 CVE-2026-35519
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
TI-2026-27635 CVE-2026-35518
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
TI-2026-27634 CVE-2026-35517
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection
Priority HIGH 73
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
TI-2026-27620 CVE-2026-35491
Pi-hole FTL: CLI API sessions can import Teleporter archives and modify configuration
Priority MEDIUM 60
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.
TI-2021-10161 CVE-2021-29448
Stored DOM XSS in Pi-hole Admin Web Interface
Priority LOW 39
Pi-hole is a Linux network-level advertisement and Internet tracker blocking application.