Filtered by vendor Coolercontrol Subscriptions
Filtered by product Coolercontrold Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-5208 1 Coolercontrol 1 Coolercontrold 2026-04-09 8.2 High
Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names
CVE-2026-5300 1 Coolercontrol 1 Coolercontrold 2026-04-09 5.9 Medium
Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests
CVE-2026-5302 1 Coolercontrol 1 Coolercontrold 2026-04-09 6.3 Medium
CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites