Vulnerability index

Browse CVEs

16 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Panel HIGH 8.1
CVE-2026-26016

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.12.1, a missing authorization…

Fix: 1.12.1+
Fix from $1,950 2026-02-19
Wings MEDIUM 6.5
CVE-2026-21696

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version 1.7.0 and prior to version 1…

Fix: 1.12.0+
Fix from $1,600 2026-01-19
Wings MEDIUM 6.5
CVE-2025-69199

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.12.0, websockets within wings…

Fix: 1.12.0+
Fix from $1,600 2026-01-19
Panel MEDIUM 6.5
CVE-2025-69198

Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to the total number of resources…

Fix: 1.12.0+
Fix from $1,600 2026-01-19
Panel MEDIUM 6.5
CVE-2025-69197

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below allow TOTP to be used multiple times during its validity …

Fix: 1.12.0+
Fix from $1,600 2026-01-06
Panel MEDIUM 5.4
CVE-2025-68954

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP connections when a user is remo…

Fix: 1.12.0+
Fix from $1,600 2026-01-06
Wings HIGH 8.4
CVE-2024-34066

Pterodactyl wings is the server control plane for Pterodactyl Panel. If the Wings token is leaked either by viewing the node configuration or posting…

Fix: 1.11.2+
Fix from $1,950 2024-05-03
Wings MEDIUM 6.4
CVE-2024-34068

Pterodactyl wings is the server control plane for Pterodactyl Panel. An authenticated user who has access to a game server is able to bypass the prev…

Fix: 1.11.2+
Fix from $1,600 2024-05-03
Panel MEDIUM 6.1
CVE-2024-34067

Pterodactyl is a free, open-source game server management panel built with PHP, React, and Go. Importing a malicious egg or gaining access to wings i…

Fix: 1.11.6+
Fix from $1,600 2024-05-03
Wings HIGH 8.5
CVE-2024-27102

Wings is the server control plane for Pterodactyl Panel. This vulnerability impacts anyone running the affected versions of Wings. The vulnerability …

Fix: 1.11.9+
Fix from $1,950 2024-03-13
Wings HIGH 8.8
CVE-2023-32080

Wings is the server control plane for Pterodactyl Panel. A vulnerability affecting versions prior to 1.7.5 and versions 1.11.0 prior to 1.11.6 impact…

Fix: 1.7.4 / 1.11.6+
Fix from $1,950 2023-05-10
Wings HIGH 8.2
CVE-2023-25168

Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vul…

Fix: 1.7.4+
Fix from $1,950 2023-02-09
Wings HIGH 8.8
CVE-2023-25152

Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and directory str…

Fix: 1.7.3+
Fix from $1,950 2023-02-08
Panel HIGH 8.1
CVE-2021-41129

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. A malicious user can modify the contents of a `confirmati…

Fix: 1.6.2+
Fix from $1,950 2021-10-06
Wings MEDIUM 6.5
CVE-2021-32699

Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl Wings prior to `1.4.4` are vu…

Fix: 1.4.4+
Fix from $1,600 2021-06-22
Panel HIGH 7.5
CVE-2019-1020002

Pterodactyl before 0.7.14 with 2FA allows credential sniffing.

Fix: 0.7.14+
Fix from $1,950 2019-07-29