CVE-2020-8816

HighPublished

Pi-Hole AdminLTE Remote Code Execution Vulnerability

Published: May 29, 2020
Updated: Oct 21, 2025
Assigning CNA: mitre
Evidence observed: Aug 4, 2020

Primary CVSS

7.2/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

78.2%

High · next 30 days

Percentile: 99.6%
Model date: Oct 17, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Module

Pi-Hole DHCP MAC OS Command ExecutionModule
modules/exploits/unix/http/pihole_dhcp_mac_exec.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: b22ce1fbae63Related tool
Declared conditions
- platform: Unix($.exploit_unix/http/pihole_dhcp_mac_exec.platform)
- verification: check_declared($.exploit_unix/http/pihole_dhcp_mac_exec.check)

CVE-2020-8816Exploit
A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole
CVE-2020-8816Exploit
Pi-hole Remote Code Execution authenticated Version >= 4.3.2

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.