CVE-2026-5300 CoolerControl CVE debrief

Who should care

Users of CoolerControl/coolercontrold versions prior to 4.0.0, operators, platform administrators, vulnerability management teams, and security teams should be aware of this vulnerability and take steps to mitigate it. They should review official advisories, verify affected deployments, and implement compensating controls if necessary.

Technical summary

The vulnerability exists in CoolerControl/coolercontrold versions prior to 4.0.0 and allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests. The CVSS vector for this vulnerability is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Affected users should apply patches or upgrade to version 4.0.0 or later. This issue is classified as CWE-306. Users should review official advisories and take steps to mitigate the vulnerability, including verifying affected deployments and implementing compensating controls if necessary. The vulnerability has a CVSS score of 5.9 and is considered medium-severity.

Defensive priority

Medium

Recommended defensive actions

• Inventory and verify affected CoolerControl/coolercontrold versions
• Apply patch or upgrade to version 4.0.0 or later
• Monitor for suspicious HTTP requests
• Implement authentication and authorization for CoolerControl/coolercontrold
• Review compensating controls for exposed systems
• Track exceptions and retest remediated assets
• Verify vulnerability mitigation through normal change control

Evidence notes

The CVE record was published on 2026-04-08T13:16:43.123Z and last modified on 2026-07-24T20:10:00.147Z. The NVD entry is currently Analyzed. The vulnerability affects CoolerControl/coolercontrold versions prior to 4.0.0. Evidence is based on CVE.org and NVD details. Defenders should verify affected deployments and review official advisories.

Official resources