PI
Product
pi-hole
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 16Medium 6Low 1
Watch
Add pi-hole to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33727 | 6.7 | Apr 6 | Pi-hole has a Local Privilege Escalation (post-compromise, pihole -> root). Affected: >= 6.4, < 6.4.1 |
| CVE-2024-28247 | 6.5 | Mar 27 | Pihole Authenticated Arbitrary File Read with root privileges Affected: > 5.18 |
| CVE-2020-35659 | 6.1 | Dec 24 | The DNS query log in Pi-hole before 5.2.2 is vulnerable to stored XSS Affected: before 5.2.2 |
| CVE-2020-35592 | 5.4 | Feb 18 | Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the admin/ URI Affected: 5.0; 5.1; 5.1.1 |
| CVE-2020-35591 | 5.4 | Feb 18 | Pi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation Affected: 5.0; 5.1; 5.1.1 |
| CVE-2021-32793 | 4.8 | Aug 4 | Stored XSS Vulnerability in the Pi-hole Webinterface Affected: before 5.5.1 |
Showing 6