CVE-2026-26016
1 advisory.
Packagist/pterodactyl/panel CVE-2026-26016: critical, EPSS 0.52%
Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization
Action: Upgrade pterodactyl/panel to 1.12.1 or later.
composer require pterodactyl/panel:1.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.1 | - |
Fixed versions
| 1.12.1 |
Sources
- osv: GHSA-g7vw-f8p5-c728
- https://github.com/pterodactyl/panel/security/advisories/GHSA-g7vw-f8p5-c728
- https://nvd.nist.gov/vuln/detail/CVE-2026-26016
- https://github.com/pterodactyl/panel
- https://github.com/pterodactyl/panel/releases/tag/v1.12.1
CVE-2026-26016 · published · modified · JSON