Multiple Pocketmine MP Vulnerabilities Lead to Denial of Service Risks

Recent advisories have identified several Denial of Service (DoS) vulnerabilities in Pocketmine MP, affecting versions before 5.11.1, 4.20.5, and 3.26.5/4.0.5. The vulnerabilities exploit the Loginpacket and Skin Data, allowing attackers to disrupt server operations. Affected systems include various iterations of Pocketmine MP, a popular server software for Minecraft. The vulnerabilities were disclosed on September 10, 2026, and September 7, 2026, with the potential for significant impact on server availability. Administrators are urged to prioritize patching to mitigate risks. No active exploitation has been confirmed, but the vulnerabilities are critical enough to warrant immediate attention.

Key Points: • Denial of Service vulnerabilities affect multiple Pocketmine MP versions. • Attack vectors include Loginpacket and Skin Data exploitation. • Patching is essential to prevent potential service disruptions.