Pi-hole Web vulnerabilities

• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole has a Stored HTML Injection in queries.js CVE-2026-33405 3.1 LowApril 6, 2026
• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole has a Stored HTML attribute injection CVE-2026-33406 5.4 MediumApril 6, 2026
• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole has a Stored XSS / HTML injection in the Network page/Dashboard CVE-2026-33404 3.4 LowApril 6, 2026
• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole has a Reflected XSS / HTML injection in taillog.js CVE-2026-33403 6.1 MediumApril 6, 2026
• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole Web Interface has a Command Injection Vulnerability CVE-2026-33765 8.9 HighMarch 27, 2026
• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions Table CVE-2026-26953 5.4 MediumFebruary 19, 2026
• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole Web Interface has Stored HTML Injection via Local DNS Records (CNAME/Hosts) in data-tag Attribute CVE-2026-26952 5.4 MediumFebruary 19, 2026
• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection CVE-2025-59151 8.2 HighOctober 27, 2025
• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page CVE-2025-53533 Public exploit 5.1 MediumOctober 27, 2025
• com.ritense.valtimo web, pi-hole web interface +1 more Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field) CVE-2025-32785 2.0 LowOctober 27, 2025
• pi-hole adminlte, web interface +1 more Improper session handling of "Remember me for 7 days" functionality CVE-2023-23614 8.8 HighJanuary 26, 2023
• pi-hole adminlte, web interface +1 more Stored XSS in Client Groups Management (Authenticated) CVE-2021-41175 7.3 HighOctober 26, 2021
• pi-hole pi-hole/adminlte, web interface +1 more Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte CVE-2021-3812 6.7 MediumSeptember 17, 2021
• pi-hole pi-hole/adminlte, web interface +1 more Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte CVE-2021-3811 6.7 MediumSeptember 17, 2021
• pi-hole pi-hole/adminlte, web interface +1 more Sensitive Cookie Without 'HttpOnly' Flag in pi-hole/adminlte CVE-2021-3706 7.4 HighSeptember 15, 2021
• pi-hole, pi-hole web interface, adminlte +1 more +3 more Stored DOM XSS in Pi-hole Admin Web Interface CVE-2021-29448 7.6 HighApril 15, 2021