Read the docs

CoolerControl

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

CoolerControl records in CISA KEV

No CoolerControl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coolercontrold 4 records MEDIUM

Records

4 records in Coolercontrold · all components

TI-2026-04633 CVE-2026-5300 · GHSA-8gfg-vxcc-9fj7

Missing Authentication for Critical Function in coolercontrold

Priority LOW 39

Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00222 Published 2026-04-08 Fixed in 4.0.0 CWE-306
TI-2026-04635 CVE-2026-5302 · GHSA-vhqm-xjcf-g4x8

Permissive Cross-domain Policy with Untrusted Domains in coolercontrold

Priority LOW 35

CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00266 Published 2026-04-08 Fixed in 4.0.0 CWE-942
Open these records in search →