Skip to content
OpenAdvisories

Vendor

pterodactyl

28 known vulnerabilities.

Products

panel 15 wings 12 Pterodactyl Panel 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-52856 Public exploit

    Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service

    Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0.

    pterodactyl wings github.com/pterodactyl/wings Go
  • Critical 10.0
    CVE-2025-49132 Public exploit EPSS 54%

    Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution

    Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the…

    pterodactyl panel pterodactyl/panel Packagist