CVE-2021-27935

7.5 highEPSS 5.0%

High (7.5) in adguard adguard home. EPSS 5.0% chance of exploitation in the next 30 days.

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 5.0% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2021-03-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adguard:adguard_home

References

https://github.com/AdguardTeam/AdGuardHome/issues/2470
https://github.com/AdguardTeam/AdGuardHome/issues/2470

Check your stack JSON