PT-2026-43124 · Putty+1 · Putty+1

Guido Vranken · CVE-2026-48852 · Published 2026-05-22 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions PuTTY versions 0.71 through 0.83

Description An assertion failure occurs during the ECDSA (Elliptic Curve Digital Signature Algorithm) signature verification process.

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BDU:2026-07830

CVE-2026-48852

Affected Products

Putty

Red Os

References · 15

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-48852 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-48852 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07830 · Security Note
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-48852 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-48852 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-48852 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-48852 · Security Note
• https://chiark.greenend.org.uk/~sgtatham/putty/wishlist/ecdsa-remotely-triggerable-assertion.html · Vendor Advisory
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-putty-cve-2026-48852-8.0 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-putty-cve-2026-48852-7.3 · Note
• https://t.me/cveNotify/219893 · Telegram Post
• https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html · Note
• https://twitter.com/threatcluster/status/2064570914361004233 · Twitter Post
• https://vuldb.com/vuln/365571 · Note