VulnSocial

CVE-2026-35521Disclosure(pi-hole / ftldns)

LOWCVSS 8.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch pi-hole ftldns systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution (RCE) vulnerability in the DHCP hosts configuration parameter (dhcp.hosts). This vulnerability allows an authenticated attacker to inject arbitrary dnsmasq configuration directives through newline characters, ultimately achieving command execution on the underlying system. This vulnerability is fixed in 6.6.

pi-hole CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-78CWE-93

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ftldns

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
pi-hole
Products
ftldns

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-07: 3Patch / Workaround · 2026-04-07: 1Technical Details · 2026-04-07: 204-07
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    General

    CVE-2026-35521 FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a R… https://www.cve.org/CVERecord?id=CVE-2026-35521

    Post summary

    The passage references CVE-2026-35521 related to Pi‑hole's FTL engine API, but provides no concrete evidence of a PoC, exploit code, patch, or active exploitation, rendering the information general in nature.

    00000122
    57.0K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-35521 Remote Code Execution in Pi-hole FTL DHCP Hosts Configuration Parameter 6.0-6.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35521

    Post summary

    Announcement of CVE-2026-35521 indicating a remote code execution vulnerability in Pi‑hole FTL DHCP hosts configuration for versions 6.0‑6.5, with no PoC, exploit details, or patch information provided.

    0000041
    4.0K followersView on X
  • CVEFind.com@CveFindCom
    Patch

    [CVE-2026-35521: HIGH] Pi-hole FTL had a Remote Code Execution vulnerability in dhcp.hosts until version 6.6. Ensure you update to the latest version to stay secure from potential cyber attacks.#cve,CVE-2026-35521,#cybersecurity https://cvefind.com/CVE-2026-35521

    Post summary

    The statement alerts users to a Remote Code Execution flaw in Pi‑hole FTL’s dhcp.hosts module before version 6.6 and recommends updating to the latest version for protection.

    0000044
    619 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apppi-holeftldns---

Explore more

Back to dashboardpi-hole CVEsftldns vulnerabilities