Pi-hole Ftl vulnerabilities

• pi-hole ftl Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer CVE-2026-44693 8.8 HighJune 10, 2026
• pi-hole ftl, ftldns +1 more Pi-hole FTL remote code execution via newline injection in dns.interface configuration CVE-2026-39849 8.7 HighMay 5, 2026
• pi-hole ftl, ftldns +1 more Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection CVE-2026-35521 8.8 HighApril 7, 2026
• pi-hole ftl, ftldns +1 more Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection CVE-2026-35520 8.8 HighApril 7, 2026
• pi-hole ftl, ftldns +1 more Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection CVE-2026-35519 8.8 HighApril 7, 2026
• pi-hole ftl, ftldns +1 more Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection CVE-2026-35518 8.8 HighApril 7, 2026
• pi-hole ftl, ftldns +1 more Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection CVE-2026-35517 Public exploit 8.8 HighApril 7, 2026
• pi-hole ftl, ftldns +1 more Pi-hole FTL: CLI API sessions can import Teleporter archives and modify configuration CVE-2026-35491 6.1 MediumApril 7, 2026
• pi-hole, pi-hole web interface, adminlte +1 more +3 more Stored DOM XSS in Pi-hole Admin Web Interface CVE-2021-29448 7.6 HighApril 15, 2021