Executive brief
AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass in github.com/AdguardTeam/AdGuardHome
Affected products
- Go github.com/AdguardTeam/AdGuardHome
Junglewise Threat Intelligence
CVE-2026-32136: GO-2026-4686 - AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass in github.com/AdguardTeam/AdGuardHome
CVE-2026-32136 · Severity: low · CVSS 3.1 · Published 2026-03-12
Technologies: github.com/AdguardTeam/AdGuardHome (Go). Vendors: Go.
Related threats
- AdGuard Home DNS state reduction and source-port oracle in DoQ forwarding
- GO-2024-3184 - Adguard Home arbitrary file read vulnerability in github.com/AdguardTeam/AdGuardHome
- GO-2024-2924 - AdGuardHome privilege escalation vulnerability in github.com/AdguardTeam/AdGuardHome
- AdGuardHome vulnerable to Cross-Site Request Forgery