<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: pi-hole</title><description>Every new CVE for pi-hole.</description><link>https://agentprime.io/</link><item><title>CVE-2026-119336: Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink</title><link>https://agentprime.io/advisories/CVE-2026-119336/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119336/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 20:05:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-119335: Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass</title><link>https://agentprime.io/advisories/CVE-2026-119335/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119335/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 20:03:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-119334: Pi-hole: file:// adlist read check and curl can resolve different files</title><link>https://agentprime.io/advisories/CVE-2026-119334/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119334/</guid><description>CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 20:01:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-50130: Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`</title><link>https://agentprime.io/advisories/CVE-2026-50130/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-50130/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 21:35:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41489: Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks</title><link>https://agentprime.io/advisories/CVE-2026-41489/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41489/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 20:21:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33727: Pi-hole has a Local Privilege Escalation (post-compromise, pihole -&gt; root).</title><link>https://agentprime.io/advisories/CVE-2026-33727/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33727/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Apr 2026 15:02:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-34361: Pi-hole Blind Server-Side Request Forgery (SSRF) vulnerability can lead to Remote Code Execution (RCE)</title><link>https://agentprime.io/advisories/CVE-2024-34361/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-34361/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 05 Jul 2024 18:30:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-28247: Pihole Authenticated Arbitrary File Read with root privileges</title><link>https://agentprime.io/advisories/CVE-2024-28247/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28247/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Mar 2024 18:24:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-29449: Multiple Privilege Escalation Vulnerabilities Pihole</title><link>https://agentprime.io/advisories/CVE-2021-29449/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-29449/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Apr 2021 22:05:17 GMT</pubDate><category>CVE</category></item></channel></rss>