Lucene search
K

5 matches found

SUSE CVE
SUSE CVE
added 2026/02/07 12:26 a.m.3 views

SUSE CVE-2026-21696

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version 1.7.0 and prior to version 1.12.0, Wings does not consider SQLite max parameter limit when processing activity log entries allowing for low privileged user to trigger a conditi...

8.3CVSS5.6AI score0.00079EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/19 7:25 p.m.1 views

CVE-2026-21696 Endless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version 1.7.0 and prior to version 1.12.0, Wings does not consider SQLite max parameter limit when processing activity log entries allowing for low privileged user to trigger a conditi...

8.3CVSS5.8AI score0.00079EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/19 7:25 p.m.1 views

CVE-2026-21696

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version 1.7.0 and prior to version 1.12.0, Wings does not consider SQLite max parameter limit when processing activity log entries allowing for low privileged user to trigger a conditi...

8.3CVSS5.7AI score0.00079EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2026/01/19 7:25 p.m.1 views

CVE-2026-21696 Endless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version 1.7.0 and prior to version 1.12.0, Wings does not consider SQLite max parameter limit when processing activity log entries allowing for low privileged user to trigger a conditi...

8.3CVSS5.8AI score0.00079EPSS
Exploits1References5
CVE
CVE
added 2026/01/19 7:25 p.m.7 views

CVE-2026-21696

Wings (Pterodactyl) security issue CVE-2026-21696 affects version 1.7.0 through before 1.12.0. The bug arises from not honoring SQLite’s max parameter limit (32766) when deleting activity log entries, causing a query to fail with “too many SQL variables.” As a result, processed activity entries a...

8.3CVSS5.8AI score0.00079EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder