Login Request a demo
FT
Product
Ftldns
by Pi-hole · last CVE May 5, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 7Medium 1Low 0
Severity
All severities8Critical0High7Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ftldns to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39849
8.8
1%
May 5
Pi-hole FTL remote code execution via newline injection in dns.interface configuration
Affected: 6.6
CVE-2026-35521
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection
Affected: 6.0 through 6.5
CVE-2026-35520
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection
Affected: 6.0 through 6.5
CVE-2026-35519
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection
Affected: 6.0 through 6.5
CVE-2026-35518
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection
Affected: 6.0 through 6.5
CVE-2026-35517
8.8
1%
Apr 7
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection
Affected: 6.0 through 6.5
CVE-2021-29448
8.8
1%
Apr 15
Stored DOM XSS in Pi-hole Admin Web Interface
Affected: 5.7
Showing 7