h2csmuggler

h2cSmuggler Description h2cSmuggler smuggles HTTP traffic past insecure edge-server proxypass configurations by establishing HTTP/2 cleartext h2c communications with h2c-compatible back-end servers, allowing a bypass of proxy rules and access controls. See my detailed write-up below for: Technica...

CVE-2026-32136_exploit

CVE-2026-32136exploit - Bypass de autenticación mediante actualización h2c en AdGuard Home Bypass de autenticación sin autenticación previa en AdGuard Home 0.107.73 mediante la actualización de texto claro HTTP/2 h2c. | ---|--- CVE| CVE-2026-32136 CVSS| 9.8 Crítico —...

CVE-2026-32136

AdGuard Home (network-wide ad/blocking software) contains a authentication bypass vulnerability CVE-2026-32136. Before 0.107.73, an unauthenticated remote attacker can trigger an HTTP/1.1 upgrade to h2c; after the upgrade is accepted, the inner mux handles subsequent HTTP/2 requests without authe...