PatchTheCVEcoolercontrol vulnerabilities
Recent CVEs affecting coolercontrol products. 4 tracked.
coolercontrol has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-04-08. Highest priority: CVE-2026-5208 (score 47/100).
- CVE-2026-5208 HIGH 8.2 UPGRADE Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute a
- CVE-2026-5302 MEDIUM 6.3 UPGRADE CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read d
- CVE-2026-5301 HIGH 7.6 UPGRADE Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take ove
- CVE-2026-5300 MEDIUM 5.9 UPGRADE Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view
FAQ
How do I fix coolercontrol vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is coolercontrol being exploited right now?
None of the tracked coolercontrol CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which coolercontrol CVE should I patch first?
CVE-2026-5208 currently ranks highest (47/100): Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute a.