Vulnerabilities

TI-2026-35206 CVE-2026-47703 · GHSA-xgx4-4h9w-53pv

AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

LOW 27

AdGuard Home is a network-wide software for blocking ads and tracking.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00143 Published 2026-07-15 Fixed in 0.107.75, 0.81.3 CWE-330

TI-2026-24673 CVE-2026-32136 · GHSA-5fg6-wrq4-w5gh

AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass

HIGH 82

AdGuard Home is a network-wide software for blocking ads and tracking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2026-03-11 Fixed in 0.107.73 CWE-287

TI-2026-20087 CVE-2026-24902

TrustTunnel has SSRF and private network restriction bypass via numeric address destinations

MEDIUM 64

TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00267 Published 2026-01-29 Fixed in 0.9.114 CWE-918

TI-2026-20089 CVE-2026-24904

TrustTunnel has `client_random_prefix` rule bypass via fragmented or partial TLS ClientHello

MEDIUM 63

TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00299 Published 2026-01-29 Fixed in 0.9.115 CWE-284

TI-2025-32348 CVE-2025-51497 · GHSA-qp5w-v6qc-vx8v

An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS.

LOW 24

An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00164 Published 2025-07-17 No fix listed CWE-532

TI-2023-21782 CVE-2023-41173 · GHSA-r9gm-88g3-6g68

AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets.

MEDIUM 40

AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-08-25 No fix listed CWE-400

TI-2022-22588 CVE-2022-45770 · GHSA-8gg5-pvcf-9jwc

Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11…

LOW 37

Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00618 Published 2023-01-26 No fix listed CWE-20

TI-2022-13901 CVE-2022-32175 · GHSA-mwwc-3jv2-62j3

AdGuardHome - CSRF

MEDIUM 58

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00337 Published 2022-10-11 Fixed in 0.108.0-b.16 CWE-352

TI-2021-09266 CVE-2021-27935 · GHSA-75vm-hh32-424x

An issue was discovered in AdGuard before 0.105.2.

MEDIUM 41

An issue was discovered in AdGuard before 0.105.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04967 Published 2021-03-03 No fix listed CWE-522

Vulnerabilities

Filters