Is CVE-2026-52856 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-52856?

CVE-2026-52856 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-52856

Description

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0.