CVE-2026-54593 | Pterodactyl Panel/Wings File Upload /upload/file authentication replay

July 28, 2026 Yanac

A vulnerability, which was classified as critical, was found in Pterodactyl Panel and Wings. Affected is an unknown function of the file /upload/file of the component File Upload. The manipulation results in authentication bypass by capture-replay.

This vulnerability is known as CVE-2026-54593. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More