github.com/AdguardTeam/AdGuardHome

5 results · Feed

• Medium 6.3
  CVE-2026-47703

  AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

  AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dns_id=0 or txid=0 and exposed a quoted-port ICMP sou…

  AdguardTeam AdGuardHome github.com/AdguardTeam/AdGuardHome github.com/AdguardTeam/dnsproxy Go
  Jul 15, 2026
• Critical 9.8
  CVE-2026-32136 Public exploit

  AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass

  AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending an HTTP/1.1 request that requests an upgrade to HTTP/2 cleartext (h2c). Once t…

  AdguardTeam AdGuardHome github.com/AdguardTeam/AdGuardHome Go
  Mar 11, 2026
• Medium 4.9
  CVE-2024-36814

  Adguard Home arbitrary file read vulnerability

  An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.

  github.com/AdguardTeam/AdGuardHome Go
  Oct 8, 2024
• High 8.8
  CVE-2024-36586

  AdGuardHome privilege escalation vulnerability

  An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary.

  github.com/AdguardTeam/AdGuardHome Go
  Jun 13, 2024
• Medium 5.4
  CVE-2022-32175

  AdGuardHome - CSRF

  In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the …

  AdguardHome AdguardHome github.com/AdguardTeam/AdGuardHome Go
  Oct 11, 2022