PT-2026-43123 · Putty+1 · Putty+1

Sgtatham + 1 · CVE-2026-48851 · Published 2026-05-22 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions PuTTY versions 0.77 through 0.83

Description The software uses a copy of the PuTTY icon to indicate trust for TELNET data. However, the trust status is not cleared between the proxy authentication phase and the main session, which may lead to incorrect trust indications.

Recommendations Update to version 0.84.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

BDU:2026-07829

CVE-2026-48851

Affected Products

Putty

Red Os

References · 15

• https://bdu.fstec.ru/vul/2026-07829 · Security Note
• https://ubuntu.com/security/CVE-2026-48851 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-48851 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-48851 · Security Note
• https://chiark.greenend.org.uk/~sgtatham/putty/wishlist/telnet-trust-sigil.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-48851 · Vendor Advisory
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-48851 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48851 · Security Note
• https://t.me/cveNotify/219892 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-putty-cve-2026-48851-7.3 · Note
• https://twitter.com/threatcluster/status/2064570914361004233 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-putty-cve-2026-48851-8.0 · Note
• https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html · Note
• https://t.me/cveNotify/164911 · Telegram Post