This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-35202 | BDVDB-2026-337299 Detail

pterodactylpanel

Description#

Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broken and doesn't actually lock anything. Version 1.12.3 patches the issue.

Impact#

Per CVSS v4.0: confidentiality impact none, integrity impact none, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
  • CWE-770 Allocation of Resources Without Limits or Throttling

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.