Web

This hub aggregates every CVE we track for Web, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Web.

• CVE-2026-44516Valtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer7.6May 14, 2026
• CVE-2026-33405Pi-hole has a Stored HTML Injection in queries.js3.1Apr 6, 2026
• CVE-2026-33406Pi-hole has a Stored HTML attribute injection5.4Apr 6, 2026
• CVE-2026-33404Pi-hole has a Stored XSS / HTML injection in the Network page/Dashboard3.4Apr 6, 2026
• CVE-2026-33403Pi-hole has a Reflected XSS / HTML injection in taillog.js6.1Apr 6, 2026
• CVE-2026-33765Pi-hole Web Interface has a Command Injection Vulnerability9.8Mar 27, 2026
• CVE-2026-26953Pi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions Table5.4Feb 19, 2026
• CVE-2026-26952Pi-hole Web Interface has Stored HTML Injection via Local DNS Records (CNAME/Hosts) in data-tag Attribute5.4Feb 19, 2026
• CVE-2025-55064Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')4.8Dec 29, 2025
• CVE-2025-55063Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')4.8Dec 29, 2025
• CVE-2025-55062Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')4.8Dec 29, 2025
• CVE-2025-55061Priority - CWE-434 Unrestricted Upload of File with Dangerous Type8.8Dec 29, 2025
• CVE-2025-55060Priority - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')6.1Dec 29, 2025
• CVE-2025-59151Pi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection8.2Oct 27, 2025
• CVE-2025-53533Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page6.1Oct 27, 2025