Is CVE-2026-52857 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-52857?

CVE-2026-52857 has a CVSS v3 severity of MEDIUM (5.5).

Back

CVE-2026-52857

Description

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust Wings process memory. This issue is fixed in version 1.13.0.