Product by Pi-hole

    FTL

    8 known vulnerabilities in FTL (Pi-hole), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in FTL (Pi-hole)
    HighCVE-2026-39849

    Pi-hole FTL remote code execution via newline injection in dns.interface configuration

    also in 1 other product

    		8.8
    HighCVE-2026-35517

    Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection

    also in 1 other product

    		8.8
    HighCVE-2026-35521

    Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection

    also in 1 other product

    		8.8
    HighCVE-2026-35520

    Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection

    also in 1 other product

    		8.8
    HighCVE-2026-35518

    Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection

    also in 1 other product

    		8.8
    HighCVE-2026-35519

    Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection

    also in 1 other product

    		8.8
    HighCVE-2021-29448

    Stored DOM XSS in Pi-hole Admin Web Interface

    also in 3 other products

    		7.6
    MediumCVE-2026-35491

    Pi-hole FTL: CLI API sessions can import Teleporter archives and modify configuration

    also in 1 other product

    		6.1

    All products by Pi-hole