CVE-2026-5208:
Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names
Score
A numerical rating that indicates how dangerous this vulnerability is.
8.2HighA numerical rating that indicates how dangerous this vulnerability is.
- Published Date:Apr 8, 2026
- CISA KEV Date:*No Data*
- Industries Affected:20
Threat Predictions
- EPSS Score:0.1
- EPSS Percentile:17%
Exploitability
- Score:1.5
- Attack Vector:LOCAL
- Attack Complexity:LOW
- Privileges Required:HIGH
- User Interaction:NONE
- Scope:CHANGED
Impact
- Score:6.0
- Confidentiality Impact:HIGH
- Integrity Impact:HIGH
- Availability Impact:HIGH
Description Preview
Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names
Industries Affected
Below is a list of industries most commonly impacted or potentially at risk based on intelligence.
Low
