https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:03:51.923029+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-68954 CVE-2025-68954 — Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced 2026-10-08T05:03:51.943532+00:00

Affected: pterodactyl panel

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP connections when a user is removed from a server instance or has their permissions changes with respect to file access over SFTP. This allows a user that was already connected to SFTP to remain connected and access files even after their permissions are revoked. A user must have been connected to SFTP at the time of their permissions being revoked in order for this vulnerability to be exploited. This issue is fixed in version 1.12.0.