Approved changes feed: RSS · Atom

cpe:2.3:a:coolercontrol:coolercontrol-ui:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCoolercontrol (bfc44654-4d42-5ada-9f36-6fe777306747)
ProductCoolercontrol Ui (987184f6-0826-5b3d-b9b7-af3bcad0b54c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5301 vulnerable 2026-06-08 08:07:03.505205 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in coolercontrol-ui
HIGH (7.6)
Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entries
Published: 2026-04-08T12:04:51.524Z
Updated: 2026-04-08T16:02:36.804Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.