These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
Pterodactyl Panel before 1.14.1 has a vulnerability allowing subusers with schedule.update permission to execute arbitrary console commands by creating and triggering scheduled tasks without proper authorization checks. This high-severity issue enables attackers to control server power state, create backups, or run game-server console commands. Defenders should assess exposure, apply the vendor-provided p [truncated]
CVE-2026-61617 debrief based on the supplied source corpus. The CVE record was published on 2026-08-26T22:16:25.247Z and has not been modified since then. This vulnerability affects Pterodactyl's Wings server control plane, allowing tenants with SFTP write access to exhaust the host node's physical disk, impacting all servers. The issue is fixed in version 1.13.3, and defenders should assess exposure and [truncated]
A malformed packet received during the SFTP connection handshake causes a Go panic in Wings, the server control plane for Pterodactyl, a free, open-source game server management panel, prior to version 1.13.0. The issue is fixed in version 1.13.0. This vulnerability affects administrators of Pterodactyl game servers, users of Wings, and security teams responsible for vulnerability management. They should [truncated]
CVE-2026-52855 is a critical vulnerability in Wings, the server control plane for Pterodactyl. A low-privileged user can exploit this vulnerability to read sensitive configuration data. The issue is fixed in version 1.12.3. Users should be aware of this vulnerability and take steps to upgrade. This vulnerability has a CVSS score of 9.9 and is considered CRITICAL. The CVE record was published on 2026-07-31 [truncated]
CVE-2025-69197 debrief: Pterodactyl Panel versions 1.11.11 and below allow reuse of TOTP tokens within their 60-second validity window. This enables attackers with intercepted tokens to gain unauthorized access using a known username and password. The issue is fixed in version 1.12.0. Defenders managing Pterodactyl Panel deployments, especially those with 2FA enabled, should assess exposure and prioritize [truncated]
CVE-2025-68954 is a high-severity vulnerability in Pterodactyl, a free, open-source game server management panel. The issue allows users who have been removed from a server instance or had their SFTP permissions changed to remain connected and access files via SFTP. This vulnerability requires the user to have been connected to SFTP at the time of permission revocation to be exploited. The issue is fixed [truncated]
