CVE-2026-47703: Adguard Adguardhome

Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days.

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dns_id=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response matching for forwarded queries. This issue is fixed in version 0.107.75.

Affected products

• Adguard Adguardhome: before 0.107.75 (fixed in 0.107.75)

Published 2026-07-15. Last modified 2026-07-30.