CVE-2026-26016

Description

Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/pterodactyl/panel/security/advisories/GHSA-g7vw-f8p5-c728
• https://nvd.nist.gov/vuln/detail/CVE-2026-26016
• https://github.com/pterodactyl/panel
• https://github.com/pterodactyl/panel/releases/tag/v1.12.1