Adguard

9 CVEs across 6 Adguard products. Browse Adguard vulnerabilities, severities, and proof-of-concept exploits.

Adguard products with known CVEs

ProductCVEs
Adguardhome3
Trusttunnel2
Adguard1
Adguard DNS1
Adguard For Safari1
Adguard Home1
Adguard CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-47703Medium5.32026-07-15AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstr…
CVE-2026-32136Critical9.82026-03-11AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in A…
CVE-2026-24904Medium5.32026-01-29TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In `tls_listener.rs`, `TlsListener::listen()` peeks 1024 byte…
CVE-2026-24902High7.12026-01-29TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114. In `tcp_…
CVE-2025-51497Medium5.52025-07-17An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS. AdGaurd verbosely logged each url that Safari accessed when the plugin was active…
CVE-2023-41173High7.52023-08-25AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets.
CVE-2022-45770High7.82023-01-26Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation.
CVE-2022-32175Medium5.42022-10-11In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attac…
CVE-2021-27935High7.52021-03-03An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of…