Skip to content
OpenAdvisories

Vendor

CoolerControl

4 known vulnerabilities.

Products

coolercontrold 3 coolercontrol-ui 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-5301

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in coolercontrol-ui

    Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entries

    CoolerControl coolercontrol-ui
  • High 8.2
    CVE-2026-5208

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in coolercontrold

    Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names

    CoolerControl coolercontrold