pi-hole ftldns

Name: pi-hole ftldns
Brand: pi-hole

productUS

cpe:2.3:a:pi-hole:ftldns:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical2high0medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-35517US	—	0.86% (58th)	Exploit	no fix	2026-04-07	6.0 → 6.5
CVE-2026-39849US	high8.8	0.96% (61st)	—	no fix	2026-05-05	= 6.6
CVE-2026-35520US	—	0.70% (53rd)	—	no fix	2026-04-07	6.0 → 6.5
CVE-2026-35518US	—	0.70% (53rd)	—	no fix	2026-04-07	6.0 → 6.5
CVE-2026-35521US	—	0.69% (52nd)	—	no fix	2026-04-07	6.0 → 6.5
CVE-2021-29448US	high8.8	0.67% (52nd)	—	no fix	2021-04-15	= 5.7
CVE-2026-35519US	—	0.54% (45th)	—	no fix	2026-04-07	6.0 → 6.5
CVE-2026-35491US	—OT elevated	0.16% (5th)	—	6.6	2026-04-07	6.0 → 6.6

The flaw types (CWEs) most of these CVEs share.

CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')6 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.