CVE-2026-5300

MediumCVSS 5.9

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

In CoolerControl/coolercontrold before version 4.0.0, unauthenticated functionality allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests.

Risk Assessment

Unauthenticated attackers can access or modify sensitive data, posing a serious threat to system confidentiality and integrity.

Recommendation

Immediately update CoolerControl to version 4.0.0 or later, which fixes this vulnerability.

Original NVD description (English source)

Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests