Skip to content
OpenAdvisories

Vendor

AdguardTeam

3 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Critical 9.4

    AdGuard Home Authentication Bypass via Path Traversal in Admin-Token Cookie

    AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string …

  • Critical 9.8
    CVE-2026-32136 Public exploit

    AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass

    AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending an HTTP/1.1 request that requests an upgrade to HTTP/2 cleartext (h2c). Once t…