PT-2026-43124 · Putty · Putty

Guido Vranken · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-48852

Mitre

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2026-48852

Affected Products

Putty

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-48852 · Security Note
• https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html · Note
• https://chiark.greenend.org.uk/~sgtatham/putty/wishlist/ecdsa-remotely-triggerable-assertion.html · Note