CVE-2026-5301

MEDIO 6.1CVE-2026-5301 · Published 08/04/2026 · updated 23/10/2026

In breve

CVE-2026-5301 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda coolercontrold (coolercontrol).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.28%, superiore al 20.0% delle vulnerabilità.
Correzione: aggiornare a 4.0.0 o successiva.

Package	Affected versions	Patched versions
coolercontrold coolercontrol	`< 4.0.0`	`4.0.0`

Description

Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entries

References

gitlab.com/coolercontrol/coolercontrol/-/blob/2.0.0/coolercontrol-ui/src/views/AppInfoView.vue · Product
gitlab.com/coolercontrol/coolercontrol/-/blob/3.1.1/coolercontrol-ui/src/views/AppInfoView.vue · Product
gitlab.com/coolercontrol/coolercontrol/-/releases/4.0.0 · Release Notes

Altre vulnerabilità di coolercontrold

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free