PT-2026-43123 · Putty · Putty

Sgtatham + 1 · Published 2026-05-25 · Updated 2026-05-27 · CVE-2026-48851

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions PuTTY versions 0.77 through 0.83

Description The software uses a copy of the PuTTY icon to indicate trust for TELNET data. However, the trust status is not cleared between the proxy authentication phase and the main session, which may lead to incorrect trust indications.

Recommendations Update to version 0.84.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

CVE-2026-48851

Affected Products

Putty

References · 4

• https://chiark.greenend.org.uk/~sgtatham/putty/wishlist/telnet-trust-sigil.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48851 · Security Note
• https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html · Note
• https://t.me/cveNotify/164911 · Telegram Post