Advisories · Technology
pi-hole FTL.
Every CVE that names pi-hole FTL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer
- pi-hole FTL
- Race condition
- CVSS 8.7 High
Pi-hole FTL remote code execution via newline injection in dns.interface configuration
- pi-hole FTL
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 8.8 High
Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection
- pi-hole FTL
- Command injection
- Other injection
- CVSS 6.1 Medium
Pi-hole FTL: CLI API sessions can import Teleporter archives and modify configuration
- pi-hole FTL
- Broken access control