Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:2 p.m.2 views

CVE-2026-32136

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending an HTTP/1.1 request that requests an upgrade to HTTP/2 cleartext h2c. Once the upgrade is accepted, the resulting...

9.8CVSS5.8AI score0.00735EPSS
Exploits2References1
SUSE CVE
SUSE CVE
added 2026/03/25 12:24 a.m.3 views

SUSE CVE-2026-32136

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending an HTTP/1.1 request that requests an upgrade to HTTP/2 cleartext h2c. Once the upgrade is accepted, the resulting...

9.8CVSS5.9AI score0.00735EPSS
Exploits2References3
Snyk
Snyk
added 2026/03/12 8:57 p.m.1 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the h2c upgrade process. An attacker can gain unauthorized access by exploiting improper authentication handling during the HTTP/2 Cleartext upgrade. Remediation Upgrade...

9.8CVSS5.8AI score0.00735EPSS
Exploits2References3
EUVD
EUVD
added 2026/03/12 2:47 p.m.4 views

EUVD-2026-11416

AdGuard Home: HTTP/2 Cleartext h2c Upgrade Authentication Bypass...

9.8CVSS5.8AI score0.00735EPSS
Exploits2References2
NVD
NVD
added 2026/03/11 10:16 p.m.4 views

CVE-2026-32136

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending an HTTP/1.1 request that requests an upgrade to HTTP/2 cleartext h2c. Once the upgrade is accepted, the resulting...

9.8CVSS0.00735EPSS
Exploits2References1
CVE
CVE
added 2026/03/11 9:42 p.m.14 views

CVE-2026-32136

AdGuard Home (network-wide ad/blocking software) contains a authentication bypass vulnerability CVE-2026-32136. Before 0.107.73, an unauthenticated remote attacker can trigger an HTTP/1.1 upgrade to h2c; after the upgrade is accepted, the inner mux handles subsequent HTTP/2 requests without authe...

9.8CVSS5.8AI score0.00735EPSS
Exploits2References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/11 9:42 p.m.3 views

CVE-2026-32136

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending an HTTP/1.1 request that requests an upgrade to HTTP/2 cleartext h2c. Once the upgrade is accepted, the resulting...

9.8CVSS5.8AI score0.00735EPSS
Exploits2References2Affected Software1
OSV
OSV
added 2026/03/11 9:42 p.m.3 views

CVE-2026-32136 AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending an HTTP/1.1 request that requests an upgrade to HTTP/2 cleartext h2c. Once the upgrade is accepted, the resulting...

9.8CVSS5.9AI score0.00735EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.4 views

PT-2026-24857

AdGuard Home and Affected Versions AdGuard Home versions prior to 0.107.73 Description AdGuard Home is a network-wide software for blocking ads and tracking. A critical issue exists where an unauthenticated remote attacker can bypass all authentication mechanisms. This is achieved by sending an...

9.9CVSS7.2AI score0.22162EPSS
Exploits68References141
Rows per page
Query Builder