Skip to content
#

ftldns

Star

Here is 1 public repository matching this topic...

keraattin / CVE-2026-35517

Star 0

CVE-2026-35517 Pi-hole FTLDNS Remote Code Execution via Newline Injection (CVSS 8.8). Python & Nmap NSE detection scripts with full technical breakdown. A newline character in the dns.upstreams parameter gives authenticated attackers command execution on the host. Five related injection vectors all patched in FTL v6.6.

pi-hole dnsmasq cybersecurity rce vulnerability-detection nmap-scripts pihole remote-code-execution crlf-injection nse-scripts cve-2026-35517 ftldns newline-injection
  • Updated Apr 14, 2026
  • Python

Improve this page

Add a description, image, and links to the ftldns topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the ftldns topic, visit your repo's landing page and select "manage topics."

Learn more