VulnSocial

CVE-2026-52855Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

Back to dashboard
0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-08-01); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-08-01: 2Mentions · 2026-08-02: 1Mentions · 2026-08-04: 1Patch / Workaround · 2026-08-02: 1Patch / Workaround · 2026-08-04: 1Technical Details · 2026-08-01: 1Technical Details · 2026-08-02: 1Technical Details · 2026-08-04: 108-0108-0208-04
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-08-012
Disclosure1General1
2026-08-021
Patch1
2026-08-041
Disclosure1
Full discourse4 posts
  • HOL@HashgraphOnline
    Disclosure

    CVE-2026-52855 (CVSS 9.9): Pterodactyl Wings leaks its entire daemon config through egg templates. Any {{config.path}} placeholder resolves against the full marshalled config: API keys, SFTP creds, DB strings. No restriction on which paths can be read. Fixed in Wings 1.12.3. https://hol.org/blog/cve-2026-52855-pterodactyl-wings-configuration-secrets-leak

    Post summary

    The note announces CVE-2026-52855, which leaks the full Pterodactyl Wings daemon configuration through egg templates, and indicates the issue was fixed in Wings 1.12.3.

    02140944
    19.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-52855 Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholders in egg configuration-fi… https://www.cve.org/CVERecord?id=CVE-2026-52855

    Post summary

    The tweet announces that Pterodactyl’s Wings control plane is vulnerable before version 1.12.3 due to placeholder handling in egg configuration files.

    000011.0K
    57.9K followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    CVE-2026-52855 - Critical SSTI in Wings (Pterodactyl). Low-priv user can read daemon config tokens via {{config.}} in egg templates. CVSS 9.9. Update to 1.12.3 immediately. #CVE #infosec #Pterodactyl #cvealert #cybersecurityawareness #cybersecurity #cybersecuritytips #cybersecuritynews #redteam #blueteam #linux #git #github #gitlab #docker #python https://www.valtersit.com/cve/CVE-2026-52855

    Post summary

    The advisory warns of a critical SSTI flaw in Pterodactyl Wings, and urges users to upgrade to version 1.12.3 to mitigate the risk.

    0000051
    980 followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-52855 Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, placeholders in egg configuration-fi… https://www.cve.org/CVERecord?id=CVE-2026-52855 ----- Traducción: CVE-2026-52855 Wings es el pl… http://infoflow.cloud`

    Post summary

    The tweet references CVE‑2026‑52855 with a link to its record but offers no further technical, exploit, patch or active‑exploitation information.

    0000041
    96 followersView on X

Explore more

Back to dashboard