CoolerControl vulnerabilities
We track 3 vulnerabilities in CoolerControl products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 8, 2026.
3vulnerabilities
1critical
2high
0exploited
8.1average CVSS score
Latest CoolerControl vulnerabilities
- 8.1 High severity
coolercontrold: Permissive Cross-domain Security Policy with Untrusted Domains
CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites
- 9.1 Critical severity
coolercontrold: Missing Authentication for Critical Functionality
Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests
- 7.2 High severity
coolercontrold: Improper Neutralization of Special Elements used in an OS Command
Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names