Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

28 records

Priority HIGH 73

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedule.update permission to execute arbitrary console commands.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00577 Published 2026-09-05 Fixed in 1.14.1 CWE-862
Priority LOW 36

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-01-19 Fixed in 1.12.0 CWE-400
Priority MEDIUM 40

Pterodactyl wings is the server control plane for Pterodactyl Panel.

CVSS 3.1HIGH 8.5 Network High privileges User interaction EPSS 0.00544 Published 2024-05-03 Fixed in 1.11.12 CWE-552
TI-2021-18015 CVE-2021-41176 · GHSA-m49f-hcxp-6hm6

logout CSRF in Pterodactyl Panel

Priority LOW 21

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0052 Published 2021-10-25 Fixed in 1.6.3 CWE-352
Load more