CVE-2026-44693

HIGH EPSS 13.7%
Published Jun 10, 20262w ago · Modified Jun 17, 20262w ago
8.8 CVSS 3.1
High
Find Similar
Published Jun 10, 2026 2w ago
Last Modified Jun 17, 2026 2w ago

Description

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This issue has been patched in version 6.6.1.

CVSS Details

Base Score
8.8
Exploitability
2.8
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
13.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-362

References 2

  • github.com https://github.com/pi-hole/FTL/releases/tag/v6.6.1
  • github.com https://github.com/pi-hole/FTL/security/advisories/GHSA-9ff5-f3v5-2xc7

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.