CVE-2026-47703: CWE-330: Use of Insufficiently Random Values in AdguardTeam AdGuardHome
AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dns_id=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response matching for forwarded queries. This issue is fixed in version 0.107.75.
AI Analysis
Technical Summary
AdGuard Home before version 0.107.75 contains a vulnerability where the client-triggered DoQ forwarding path to a udp:// upstream generates DNS transaction IDs (dns_id or txid) with a value of 0. This insufficient randomness (CWE-330) combined with exposure of a quoted-port ICMP source-port oracle (CWE-346) weakens the DNS response matching mechanism for forwarded queries. This can potentially allow attackers to predict or interfere with DNS responses. The vulnerability has been addressed and fixed in AdGuard Home version 0.107.75.
Potential Impact
The vulnerability reduces the randomness of DNS transaction identifiers in forwarded DNS queries, weakening the DNS response matching process. This could allow an attacker to exploit the predictable transaction IDs and the ICMP source-port oracle to interfere with or spoof DNS responses. However, the overall impact is rated medium severity with a CVSS score of 6.3, indicating that exploitation requires conditions such as high attack complexity and partial user interaction.
Mitigation Recommendations
Upgrade AdGuard Home to version 0.107.75 or later, where this vulnerability has been fixed. No other specific mitigations are indicated. Patch status is confirmed by the vendor's versioning information.
CVE-2026-47703: CWE-330: Use of Insufficiently Random Values in AdguardTeam AdGuardHome
Description
AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dns_id=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response matching for forwarded queries. This issue is fixed in version 0.107.75.
CVSS v4.0
Score 6.3medium
Affected software
pkg:github/adguardteam/AdGuardHomeRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
AdGuard Home before version 0.107.75 contains a vulnerability where the client-triggered DoQ forwarding path to a udp:// upstream generates DNS transaction IDs (dns_id or txid) with a value of 0. This insufficient randomness (CWE-330) combined with exposure of a quoted-port ICMP source-port oracle (CWE-346) weakens the DNS response matching mechanism for forwarded queries. This can potentially allow attackers to predict or interfere with DNS responses. The vulnerability has been addressed and fixed in AdGuard Home version 0.107.75.
Potential Impact
The vulnerability reduces the randomness of DNS transaction identifiers in forwarded DNS queries, weakening the DNS response matching process. This could allow an attacker to exploit the predictable transaction IDs and the ICMP source-port oracle to interfere with or spoof DNS responses. However, the overall impact is rated medium severity with a CVSS score of 6.3, indicating that exploitation requires conditions such as high attack complexity and partial user interaction.
Mitigation Recommendations
Upgrade AdGuard Home to version 0.107.75 or later, where this vulnerability has been fixed. No other specific mitigations are indicated. Patch status is confirmed by the vendor's versioning information.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-19T21:18:20.404Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a57b64168715ace430b383e
Added to database: 07/15/2026, 16:33:05 UTC
Last enriched: 07/15/2026, 16:49:49 UTC
Last updated: 07/16/2026, 03:43:51 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.