CVE-2020-8816: Pi-Hole AdminLTE Remote Code Execution Vulnerability

High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 78.2% chance of exploitation in the next 30 days.

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

Affected products

• Pi-hole Pi-Hole: up to and including 4.3.2

Published 2020-05-29. Last modified 2026-06-17.