Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-5302

Permissive Cross-domain Policy with Untrusted Domains in coolercontrold

Description

CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CoolerControl coolercontrold

Default version status: unaffected

  • 2.0.0 to < 4.0.0affected

References