VULNERABILITY INTELLIGENCE

CVE-2026-5208

CVSS score8.2 HIGH

EPSS probability0.97%

CISA KEVNot currently listed

Published2026-04-08

Last modified2026-10-23

Description

Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names