Stored XSS Vulnerability in CoolerControl's User Interface

CVE-2026-5301

What is CVE-2026-5301?

A Stored XSS vulnerability exists in the log viewer of CoolerControl's user interface prior to version 4.0.0. This flaw allows unauthenticated attackers to inject malicious JavaScript into log entries, potentially compromising the service and enabling control over the affected environment. The vulnerability can be exploited by leveraging the log's unfiltered input, thereby executing harmful scripts whenever the log is viewed.

References