CVE-2026-5300

CRITICAL 9.1CVE-2026-5300 · Published 08/04/2026 · updated 23/10/2026

Package	Affected versions	Patched versions
coolercontrold coolercontrol	`< 4.0.0`	`4.0.0`

Description

Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests

References

gitlab.com/coolercontrol/coolercontrol/-/blob/3.1.1/coolercontrold/src/api/router.rs · Product
gitlab.com/coolercontrol/coolercontrol/-/releases/4.0.0 · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free