Adguard

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Adguard records in CISA KEV

No Adguard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Adguardhome 3 records HIGH Trusttunnel 2 records MEDIUM Adguard 1 record LOW Adguard Dns 1 record MEDIUM Adguard For Safari 1 record LOW Adguard Home 1 record MEDIUM

Records

9 records

TI-2026-24673 CVE-2026-32136 · GHSA-5fg6-wrq4-w5gh

AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass

HIGH 82

AdGuard Home is a network-wide software for blocking ads and tracking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2026-03-11 Fixed in 0.107.73 CWE-287

TI-2026-20087 CVE-2026-24902

TrustTunnel has SSRF and private network restriction bypass via numeric address destinations

MEDIUM 64

TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00267 Published 2026-01-29 Fixed in 0.9.114 CWE-918

TI-2026-20089 CVE-2026-24904

TrustTunnel has `client_random_prefix` rule bypass via fragmented or partial TLS ClientHello

MEDIUM 63

TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00299 Published 2026-01-29 Fixed in 0.9.115 CWE-284

TI-2022-13901 CVE-2022-32175 · GHSA-mwwc-3jv2-62j3

AdGuardHome - CSRF

MEDIUM 58

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00337 Published 2022-10-11 Fixed in 0.108.0-b.16 CWE-352

TI-2021-09266 CVE-2021-27935 · GHSA-75vm-hh32-424x

An issue was discovered in AdGuard before 0.105.2.

MEDIUM 41

An issue was discovered in AdGuard before 0.105.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04967 Published 2021-03-03 No fix listed CWE-522

TI-2023-21782 CVE-2023-41173 · GHSA-r9gm-88g3-6g68

AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets.

MEDIUM 40

AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-08-25 No fix listed CWE-400

TI-2022-22588 CVE-2022-45770 · GHSA-8gg5-pvcf-9jwc

Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11…

LOW 37

Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00618 Published 2023-01-26 No fix listed CWE-20

TI-2026-35206 CVE-2026-47703 · GHSA-xgx4-4h9w-53pv

AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

LOW 27

AdGuard Home is a network-wide software for blocking ads and tracking.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00143 Published 2026-07-15 Fixed in 0.107.75, 0.81.3 CWE-330

TI-2025-32348 CVE-2025-51497 · GHSA-qp5w-v6qc-vx8v

An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS.

LOW 24

An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00164 Published 2025-07-17 No fix listed CWE-532

Open these records in search →

Critical	1
High	4
Medium	4
Low	0
No CVSS	0