Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/AdguardTeam/AdGuardHome

5 known vulnerabilities (1 critical, 1 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
v0.107.80 (Nov 3, 2026): affected by 2 advisories
Newest unaffected release
Every release is affected by at least one advisory
Advisories
5 · 1 critical, 1 high, 3 medium
Releases
247 since v0.97.0 (Jul 12, 2019)
Registry
pkg.go.dev
Releases read
Nov 8, 2026

Version timeline

  • CVE-2026-47703
    Affects v0.97.0 to v0.107.74 (v0.107.75 is outside it)
  • CVE-2026-32136
    Affects v0.97.0 to v0.107.72 (v0.107.73 is outside it)
  • CVE-2024-36814
    Affects v0.97.0 to v0.107.52 (v0.107.53 is outside it)
  • CVE-2024-36586
    Affects v0.97.0 to v1.0.0-b.2 (through the newest release)
  • CVE-2022-32175
    Affects v0.97.0 to v0.108.0-b.15 (v0.108.0-b.16 is outside it)
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 5

  • CVE-2026-47703Medium 6.3

    AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

    Affected: fixed in 0.107.75.

    Fixed in v0.107.75 (released May 19, 2026, 57 days before disclosure).

    The latest release, v0.107.80, is not affected.

  • CVE-2026-32136Critical 9.8

    AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass

    Affected: fixed in 0.107.73.

    Fixed in v0.107.73 (released Mar 10, 2026, 1 day before disclosure).

    The latest release, v0.107.80, is not affected.

  • CVE-2024-36814Medium 4.9

    An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on…

    Affected: fixed in 0.107.53.

    Fixed in v0.107.53 (released Oct 3, 2024, 5 days before disclosure).

    The latest release, v0.107.80, is not affected.

  • An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary.

    Affected: all versions; from 0.93, through 0.107.51.

    No fix released. The latest release, v0.107.80, is still affected.

  • CVE-2022-32175Medium 5.4

    AdGuardHome - CSRF

    Affected: from 0.95, fixed in 0.108.0-b.16.

    Fixed in v0.108.0-b.16 (released Sep 29, 2022, 12 days before disclosure).

    The latest release, v0.107.80, is still affected.