SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-52856

HIGH · CVSS 7.5 EPSS 0.34% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-31 · Last synced 2026-08-30

CyberRota Analysis

AI-Generated

Wings, the server control plane for Pterodactyl, is vulnerable to a denial-of-service condition caused by a malformed packet during the SFTP connection handshake, leading to a Go panic. This vulnerability can disrupt service availability for game server management, making it critical for administrators of Pterodactyl installations to upgrade to version 1.13.0 to mitigate the risk. Organizations relying on Pterodactyl for game server management should prioritize this update to ensure operational stability.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-52856
Severity
HIGH
CVSS
7.5
EPSS
0.34%

Original NVD Description

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0.