pi-hole FTL

• CVE-2026-44693 High 8.8 Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer 0.3%
• CVE-2026-39849 High 8.7 Pi-hole FTL remote code execution via newline injection in dns.interface configuration 1.0%
• CVE-2026-35521 High 8.8 Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection 0.7%
• CVE-2026-35520 High 8.8 Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection 0.7%
• CVE-2026-35519 High 8.8 Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection 0.5%
• CVE-2026-35518 High 8.8 Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection 0.7%
• CVE-2026-35517 High 8.8 Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection 0.9%
• CVE-2026-35491 Medium 6.1 Pi-hole FTL: CLI API sessions can import Teleporter archives and modify configuration 0.2%