Adguard
9 CVEs across 6 Adguard products. Browse Adguard vulnerabilities, severities, and proof-of-concept exploits.
Adguard products with known CVEs
Adguard CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-47703 | Medium | 5.3 | 2026-07-15 | AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstr… |
CVE-2026-32136 | Critical | 9.8 | 2026-03-11 | AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in A… |
CVE-2026-24904 | Medium | 5.3 | 2026-01-29 | TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In `tls_listener.rs`, `TlsListener::listen()` peeks 1024 byte… |
CVE-2026-24902 | High | 7.1 | 2026-01-29 | TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114. In `tcp_… |
CVE-2025-51497 | Medium | 5.5 | 2025-07-17 | An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS. AdGaurd verbosely logged each url that Safari accessed when the plugin was active… |
CVE-2023-41173 | High | 7.5 | 2023-08-25 | AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets. |
CVE-2022-45770 | High | 7.8 | 2023-01-26 | Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation. |
CVE-2022-32175 | Medium | 5.4 | 2022-10-11 | In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attac… |
CVE-2021-27935 | High | 7.5 | 2021-03-03 | An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of… |