{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Pi-hole vulnerabilities","home_page_url":"https://patchfirst.co/vendor/pi-hole/","feed_url":"https://patchfirst.co/feed/vendor/pi-hole.json","description":"New and newly exploited Pi-hole CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2020-8816#kev","url":"https://patchfirst.co/cve/CVE-2020-8816/","title":"[KEV] CVE-2020-8816: Pi-Hole AdminLTE Remote Code Execution Vulnerability","content_text":"Pi-hole · AdminLTE. In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 78.3% (higher than 99.58% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 68.0 of 100.","summary":"Pi-Hole AdminLTE Remote Code Execution Vulnerability","date_published":"2021-12-10T00:00:00.000Z","date_modified":"2026-06-17T03:26:59.000Z","tags":["kev","public-exploit","T1078","T1059"],"_patchfirst":{"reason":"kev","priority":68,"kev":{"dateAdded":"2021-12-10","ransomware":false},"epss":{"score":0.78336,"percentile":0.9958},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"Pi-hole","product":"AdminLTE","techniqueIds":["T1078","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-32706","url":"https://patchfirst.co/cve/CVE-2021-32706/","title":"CVE-2021-32706: (Authenticated) Remote Code Execution Possible in Web Interface 5.5","content_text":"pi-hole · AdminLTE. Not in CISA KEV. EPSS 60.2% (higher than 99.13% of CVEs). CVSS 7.6 HIGH. Public exploit code exists. Priority 31.5 of 100.","summary":"(Authenticated) Remote Code Execution Possible in Web Interface 5.5","date_published":"2021-08-04T00:00:00.000Z","date_modified":"2024-08-03T23:25:31.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":31.5,"kev":null,"epss":{"score":0.60181,"percentile":0.99135},"cvss":{"score":7.6,"severity":"HIGH","version":"3.1"},"vendor":"pi-hole","product":"AdminLTE","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}