CyberSecBulletin

AdguardTeam vulnerabilities

We track 2 vulnerabilities in AdguardTeam products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2026.

2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score

Latest AdguardTeam vulnerabilities

  • 9.4 Critical severity

    AdGuardHome: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-41448AdguardTeam

    AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string c

  • 9.8 Critical severity

    AdGuardHome: Improper Authentication

    CVE-2026-32136AdguardTeam

    AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending an HTTP/1.1 request that requests an upgrade to HTTP/2 cleartext (h2c). Once th