CVE-2020-8816

HIGH7.2

CISA KEV

Published 2020-05-29 · Updated 2026-06-17 · Source cve@mitre.org

Summary

CVE-2020-8816 is a high-severity (CVSS 7.2) vulnerability in Pi-hole AdminLTE. CISA added it to the Known Exploited Vulnerabilities catalog on December 10, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by June 10, 2022. CISA does not currently list it as used in ransomware campaigns.

All 1 known-exploited Pi-hole vulnerabilities →

Description

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-78CWE-78

CISA Known-Exploited Vulnerability

Product: Pi-hole — AdminLTE

Name: Pi-Hole AdminLTE Remote Code Execution Vulnerability

Date added: 2021-12-10 · Due: 2022-06-10

Required action: Apply updates per vendor instructions.

References

View on NVD

Related CVEs

Same severity, most recent

CVE-2026-75590
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access internal network resources and obtain sensitive information due to server-side request forgery. A protection that blocks requests to internal addresses can be bypassed, so the server could be made to contact internal services and return part of their responses.
2026-11-07 · score 7.2
CVE-2026-19128
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks.
2026-11-07 · score 7.5
CVE-2026-19121
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization. Tenant context is not sufficiently verified against the authenticated user, which could allow access to another tenant's resources.
2026-11-07 · score 8.3
CVE-2026-17411
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.
2026-11-07 · score 7.6
CVE-2026-17407
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.
2026-11-07 · score 8.5