Vendor
Coolercontrol
Products
2
CVEs
7
Across products
7
Status
Private
Products
2- 4 CVEs
- 3 CVEs
Recent CVEs
7| CVE | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-5208 | Hig | 0.53 | 8.2 | 0.00 | Apr 8, 2026 | Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names | |
| CVE-2026-5301 | Hig | 0.49 | 7.6 | 0.00 | Apr 8, 2026 | Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entries | |
| CVE-2026-5302 | Med | 0.41 | 6.3 | 0.00 | Apr 8, 2026 | CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites | |
| CVE-2026-5300 | Med | 0.38 | 5.9 | 0.00 | Apr 8, 2026 | Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests | |
| CVE-2022-48475 | 0.00 | — | 0.01 | Sep 12, 2023 | Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Overflow when the adminitrator tries to accept or delete the print query created by the request. | ||
| CVE-2022-48474 | 0.00 | — | 0.02 | Sep 12, 2023 | Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process. | ||
| CVE-2022-4896 | 0.00 | — | 0.01 | Sep 12, 2023 | Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows with the messages "PNTMEDIDAS", "PEDIR", "HAYDISCOA" or "SPOOLER". A complete denial of service can be achieved by sending multiple requests simultaneously on a core. |