GO-2026-6156Published
Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-52856 · Microsoft / collected KEV context
cve-program · CVE-2026-52856
- https://github.com/pterodactyl/wings/security/advisories/GHSA-ghrq-5wpp-hxx5
- https://github.com/pterodactyl/wings/commit/8e49c7c0eda815d3ada171831876a1c14c493026
- https://github.com/pterodactyl/wings/releases/tag/v1.13.0
nvd · CVE-2026-52856
- https://github.com/pterodactyl/wings/commit/8e49c7c0eda815d3ada171831876a1c14c493026
- https://github.com/pterodactyl/wings/releases/tag/v1.13.0
- https://github.com/pterodactyl/wings/security/advisories/GHSA-ghrq-5wpp-hxx5
osv · GHSA-ghrq-5wpp-hxx5
- https://github.com/pterodactyl/wings/security/advisories/GHSA-ghrq-5wpp-hxx5
- https://github.com/pterodactyl/wings/commit/8e49c7c0eda815d3ada171831876a1c14c493026
- https://github.com/pterodactyl/wings
- https://github.com/pterodactyl/wings/releases/tag/v1.13.0
osv · GO-2026-6156
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.