Product by Pi-hole

    AdminLTE

    23 known vulnerabilities in AdminLTE (Pi-hole), 1 of them actively exploited (CISA KEV).

    Key figures

    23

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in AdminLTE (Pi-hole)
    CriticalCVE-2020-8816

    Pi-Hole AdminLTE Remote Code Execution Vulnerability

    In CISA KEV

    		9.1
    CriticalCVE-2025-34087

    Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution

    		8.8
    HighCVE-2020-11108

    Pi-hole AdminLTE: Privilege Escalation

    		8.8
    HighCVE-2019-13051

    Pi-hole AdminLTE: Command Injection

    		8.8
    HighCVE-2021-32706

    (Authenticated) Remote Code Execution Possible in Web Interface 5.5

    also in 1 other product

    		7.6
    HighCVE-2024-34361

    Pi-hole AdminLTE: Server-Side Request Forgery (SSRF)

    		8.6
    HighCVE-2024-28247

    Pihole Authenticated Arbitrary File Read with root privileges

    		7.6
    HighCVE-2020-12620

    Pi-hole AdminLTE: Command Injection

    		7.8
    HighCVE-2021-29449

    Multiple Privilege Escalation Vulnerabilities Pihole

    		6.3
    HighCVE-2026-119336

    AdminLTE: Link Following

    		7.8
    HighCVE-2026-119335

    Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass

    		7.8
    HighCVE-2026-50130

    Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

    		8.8
    MediumCVE-2020-35591

    Pi-hole AdminLTE: Session Fixation

    		5.4
    HighCVE-2026-41489

    Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks

    		8.8
    MediumCVE-2020-35659

    Pi-hole AdminLTE: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2021-29448

    Stored DOM XSS in Pi-hole Admin Web Interface

    also in 3 other products

    		7.6
    HighCVE-2020-14162

    Pi-hole AdminLTE: security vulnerability

    		7.8
    HighCVE-2024-44069

    Pi-hole AdminLTE: security vulnerability

    		7.5
    HighCVE-2020-14971

    Pi-hole AdminLTE: Code Injection

    		7.8
    MediumCVE-2020-35592

    Pi-hole AdminLTE: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2021-32793

    Stored XSS Vulnerability in the Pi-hole Webinterface

    also in 1 other product

    		5.7
    MediumCVE-2026-33727

    Pi-hole AdminLTE: Improper Privilege Management

    		6.4
    LowCVE-2026-119334

    Pi-hole: file:// adlist read check and curl can resolve different files

    		2.2

    News

    All products by Pi-hole