CVE-2026-52856 — Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection hand…
Published: 2026-07-31 · CVSS: 7.5 · CVSS 3.1
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7