점검 대응긴급KEV 미등록
CVE-2026-41448
AdguardTeam AdGuardHome 취약점
AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string concatenation in the token file path construction within the authglinet middleware. Attackers can craft a request with a traversal payload in the Admin-Token header to redirect file reads to arbitrary paths.
- 대응 우선순위
- 점검
- CVSS
- 9.2
- EPSS
- 0.54% 백분위 42.5% · 2026.08.02 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.09