[HIGH] Pterodactyl's shared global rate-limit key on login and 2FA checkpoint enables unauthenticated panel-wide authentication lockout (DoS)

PKSA-dkjc-6qnp-q5rq CVE-2026-61609 GHSA-xvc3-826v-xf47

Affected package: pterodactyl/panel

Affected version: >=1.7.0,<=1.12.4

Reported by:
GitHub