What’s Vulnerable › Products

coolercontrold vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your coolercontrold version is affected

Latest coolercontrold vulnerabilities

• CVE-2026-5302 — Permissive Cross-domain Policy with Untrusted Domains in coolercontrold (CVSS 8.1)
• CVE-2026-5301 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in coolercontrol-ui (CVSS 6.1)
• CVE-2026-5300 — Missing Authentication for Critical Function in coolercontrold (CVSS 9.1)
• CVE-2026-5208 — Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in coolercontrold (CVSS 7.2)