pterodactyl wings

• CVE-2026-61617 High 7.7 Pterodactyl Wings SFTP write path does not enforce disk quota, allowing node-wide disk exhaustion 0.4%
• CVE-2026-52856 High 7.5 Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service 0.6%
• CVE-2026-52855 Critical 9.9 Wings exposes node configuration secrets through egg configuration-file templating 0.5%
• CVE-2026-52857 Medium 5.5 Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM 0.2%
• CVE-2026-21696 High 8.3 Endless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered 0.6%
• CVE-2024-34066 High 8.5 Arbitrary File Write/Read in Pterodactyl wings 0.5%
• CVE-2024-34068 Medium 6.4 Server-side Request Forgery during remote file pull in Pterodactyl wings 0.4%
• CVE-2024-27102 Critical 10.0 Improper isolation of server file access in github.com/pterodactyl/wings 0.5%
• CVE-2023-32080 Critical 9.1 Wings vulnerable to escape to host from installation container 0.9%
• CVE-2023-25168 Critical 9.6 Symbolic Link (Symlink) Following allowing the deletion of files and directories on the host system in wings 1.0%
• CVE-2023-25152 High 8.4 Symbolic Link (Symlink) Following in github.com/pterodactyl/wings 0.7%
• CVE-2021-32699 Medium 6.5 Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings 0.3%