PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-5300 CoolerControl CVE debrief

CVE-2026-5300 is a medium-severity vulnerability in CoolerControl/coolercontrold that allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests. The vulnerability has a CVSS score of 5.9 and is classified as CWE-306. It affects CoolerControl/coolercontrold versions prior to 4.0.0. Users should review official advisories and take steps to mitigate the vulnerability.

Vendor
CoolerControl
Product
coolercontrold
CVSS
MEDIUM 5.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-08
Original CVE updated
2026-07-24
Advisory published
2026-04-08
Advisory updated
2026-07-24

Who should care

Users of CoolerControl/coolercontrold versions prior to 4.0.0, operators, platform administrators, vulnerability management teams, and security teams should be aware of this vulnerability and take steps to mitigate it. They should review official advisories, verify affected deployments, and implement compensating controls if necessary.

Technical summary

The vulnerability exists in CoolerControl/coolercontrold versions prior to 4.0.0 and allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests. The CVSS vector for this vulnerability is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Affected users should apply patches or upgrade to version 4.0.0 or later. This issue is classified as CWE-306. Users should review official advisories and take steps to mitigate the vulnerability, including verifying affected deployments and implementing compensating controls if necessary. The vulnerability has a CVSS score of 5.9 and is considered medium-severity.

Defensive priority

Medium

Recommended defensive actions

  • Inventory and verify affected CoolerControl/coolercontrold versions
  • Apply patch or upgrade to version 4.0.0 or later
  • Monitor for suspicious HTTP requests
  • Implement authentication and authorization for CoolerControl/coolercontrold
  • Review compensating controls for exposed systems
  • Track exceptions and retest remediated assets
  • Verify vulnerability mitigation through normal change control

Evidence notes

The CVE record was published on 2026-04-08T13:16:43.123Z and last modified on 2026-07-24T20:10:00.147Z. The NVD entry is currently Analyzed. The vulnerability affects CoolerControl/coolercontrold versions prior to 4.0.0. Evidence is based on CVE.org and NVD details. Defenders should verify affected deployments and review official advisories.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-5300 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-5300

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-5300 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-5300

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.