Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-5208

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in coolercontrold

Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Coolercontrol
Products
Coolercontrold
CVE-2026-5300

Missing Authentication for Critical Function in coolercontrold

Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Coolercontrol
Products
Coolercontrold
CVE-2026-5301

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in coolercontrol-ui

Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entries

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Coolercontrol
Products
Coolercontrol-ui Coolercontrold
CVE-2026-5302

Permissive Cross-domain Policy with Untrusted Domains in coolercontrold

CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Coolercontrol
Products
Coolercontrold