CVE Catalog
CVE-2026-5302
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk0.26%
18th percentile - higher than 18% of all known CVEs
Summary
CoolerControl/coolercontrold before version 4.0.0 has a CORS misconfiguration, allowing unauthenticated remote attackers to read data and send commands to the service via malicious websites.
Risk Assessment
An attacker can remotely read data and control the service, potentially leading to unauthorized access and manipulation of the cooling system.
Recommendation
Update CoolerControl/coolercontrold to version 4.0.0 or later.
Original NVD description (English source)
CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites