CVE-2021-27935: Adguard Home

High severity, CVSS 7.5. EPSS: 5% chance of exploitation in the next 30 days.

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie.

Affected products

• Adguard Adguard Home: before 0.105.2 (fixed in 0.105.2)

Published 2021-03-03. Last modified 2026-06-17.