Web interface

This hub aggregates every CVE we track for Web interface, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Web interface.

• CVE-2026-33405Pi-hole has a Stored HTML Injection in queries.js3.1Apr 6, 2026
• CVE-2026-33406Pi-hole has a Stored HTML attribute injection5.4Apr 6, 2026
• CVE-2026-33404Pi-hole has a Stored XSS / HTML injection in the Network page/Dashboard3.4Apr 6, 2026
• CVE-2026-33403Pi-hole has a Reflected XSS / HTML injection in taillog.js6.1Apr 6, 2026
• CVE-2026-33765Pi-hole Web Interface has a Command Injection Vulnerability9.8Mar 27, 2026
• CVE-2025-59151Pi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection8.2Oct 27, 2025
• CVE-2025-53533Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page6.1Oct 27, 2025
• CVE-2025-32785Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)5.4Oct 27, 2025
• CVE-2023-23614Improper session handling of "Remember me for 7 days" functionality8.8Jan 26, 2023
• CVE-2022-41434EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /lilac/main.php.6.1Nov 8, 2022
• CVE-2022-41432EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /module/report_event/index.php.4.8Nov 8, 2022
• CVE-2022-41433EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /module/admin_bp/add_application.php.4.8Nov 8, 2022
• CVE-2021-41175Stored XSS in Client Groups Management (Authenticated)7.3Oct 26, 2021
• CVE-2021-3812Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte6.1Sep 17, 2021
• CVE-2021-3811Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte6.1Sep 17, 2021