VYPR
← All advisories
High severity8.2NVD Advisory· Published Apr 8, 2026· Updated Apr 16, 2026

CVE-2026-5208

CVE-2026-5208

Description

Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names

Affected products

2
  • Coolercontrol/Coolercontrold2 versions
    cpe:2.3:a:coolercontrol:coolercontrold:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:coolercontrol:coolercontrold:*:*:*:*:*:*:*:*range: >=3.1.0,<=4.0.0
    • (no CPE)range: <4.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.