← Database

CVE-2026-5302

MEDIUM CVSS: 6.3 Published: 2026-04-08 Modified: 2026-07-24

Description

CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites

Affected Platforms

Coolercontrol Coolercontrold

Weakness Type

CWE-942

References