h2csmuggler

h2cSmuggler Beschreibung h2cSmuggler schmuggelt HTTP-Datenverkehr an unsicheren Edge-Server-proxypass-Konfigurationen vorbei, indem es HTTP/2-Klartext-h2c-Kommunikation mit h2c-kompatiblen Backend-Servern aufbaut, was eine Umgehung von Proxy-Regeln und Zugriffskontrollen ermöglicht. Siehe meinen...

CVE-2026-32136_exploit

CVE-2026-32136exploit - Bypass de Autenticação via Upgrade h2c no AdGuard Home Bypass de autenticação não autenticada no AdGuard Home 0.107.73 via upgrade HTTP/2 em texto claro h2c. | ---|--- CVE| CVE-2026-32136 CVSS| 9.8 Crítico — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-287 Autenticação...

CVE-2026-32136

AdGuard Home (network-wide ad/blocking software) contains a authentication bypass vulnerability CVE-2026-32136. Before 0.107.73, an unauthenticated remote attacker can trigger an HTTP/1.1 upgrade to h2c; after the upgrade is accepted, the inner mux handles subsequent HTTP/2 requests without authe...