Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution (RCE) vulnerability in the DNS host record configuration parameter (dns.hostRecord). This vulnerability allows an authenticated attacker to inject arbitrary dnsmasq configuration directives through newline characters, ultimately achieving command execution on the underlying system. This vulnerability is fixed in 6.6.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35519 FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a R… https://www.cve.org/CVERecord?id=CVE-2026-35519
Post summary
The passage cites CVE-2026-35519 regarding Pi‑hole’s FTLDNS engine, mentioning an interactive API and a technical vulnerability, but offers no PoC, exploit, patch, or evidence of active use.
CVE-2026-35519 Remote Code Execution in Pi-hole FTL DNS Host Record Configuration 6.0-6.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35519
Post summary
The post announces CVE-2026-35519, a remote code execution vulnerability affecting Pi‑hole FTL versions 6.0 through 6.5, and provides a link to vulnerability details but contains no PoC, exploit code, patch info, or active exploitation evidence.
[CVE-2026-35519: HIGH] Cybersecurity alert: Pi-hole FTL engine versions 6.0 to 6.6 are vulnerable to Remote Code Execution (RCE) through dns.hostRecord parameter. Update to fix available in version 6.6.#cve,CVE-2026-35519,#cybersecurity https://cvefind.com/CVE-2026-35519
Post summary
The alert highlights a high‑severity RCE flaw (CVE‑2026‑35519) in Pi‑hole FTL engine 6.0‑6.6 and announces that a fix is available in version 6.6.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pi-hole | ftldns | - | - | - |