Login Request a demo
FT
Product
FTL
by pi-hole · last CVE Jun 10, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 7Medium 1Low 0
Severity
All severities8Critical0High7Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add FTL to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44693
8.8
0%
Jun 10
Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer
Affected: < 6.6.1
CVE-2026-39849
8.8
1%
May 5
Pi-hole FTL remote code execution via newline injection in dns.interface configuration
Affected: < 6.6.1
CVE-2026-35521
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection
Affected: >= 6.0, < 6.6
CVE-2026-35520
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection
Affected: >= 6.0, < 6.6
CVE-2026-35519
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection
Affected: >= 6.0, < 6.6
CVE-2026-35518
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection
Affected: >= 6.0, < 6.6
CVE-2026-35517
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection
Affected: >= 6.0, < 6.6
Showing 7