Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution (RCE) vulnerability in the DHCP lease time configuration parameter (dhcp.leaseTime). This vulnerability allows an authenticated attacker to inject arbitrary dnsmasq configuration directives through newline characters, ultimately achieving command execution on the underlying system. This vulnerability is fixed in 6.6.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35520 FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a R… https://www.cve.org/CVERecord?id=CVE-2026-35520
Post summary
The snippet references CVE-2026-35520 as affecting Pi‑hole's API but provides no substantive technical, exploit, or mitigation details.
CVE-2026-35520 Remote Code Execution in Pi-hole FTL DHCP Lease Time Configuration Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35520
Post summary
The post announces CVE-2026‑35520, describing it as a remote code execution flaw in Pi‑hole FTL via the DHCP lease time configuration, with no PoC, patch, or exploitation details provided.
[CVE-2026-35520: HIGH] 🔒 Pi-hole FTL engine fixed a critical Remote Code Execution (RCE) vulnerability in versions 6.0 to 6.6. Upgrade to 6.6 now to secure your system! #cybersecurity#cve,CVE-2026-35520,#cybersecurity https://cvefind.com/CVE-2026-35520
Post summary
CVE-2026-35520 is a critical RCE vulnerability in Pi‑hole FTL engine versions 6.0–6.6; the issue has been fixed in v6.6 and users are urged to upgrade to secure their systems.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pi-hole | ftldns | - | - | - |