PatchTheCVEcoolercontrold vulnerabilities and fixes
Recent CVEs affecting coolercontrold, with upgrade or downgrade steps. 4 tracked.
coolercontrold has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-04-08. Highest priority: CVE-2026-5208 (score 47/100).
- CVE-2026-5208 HIGH 8.2 UPGRADE Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute a
- CVE-2026-5302 MEDIUM 6.3 UPGRADE CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read d
- CVE-2026-5301 HIGH 7.6 UPGRADE Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take ove
- CVE-2026-5300 MEDIUM 5.9 UPGRADE Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view
FAQ
How do I fix coolercontrold vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is coolercontrold being exploited right now?
None of the tracked coolercontrold CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which coolercontrold CVE should I patch first?
CVE-2026-5208 currently ranks highest (47/100): Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute a.