← Back

CVE-2026-48852

nvd nist
Published: May 25, 2026Modified: Jul 24, 2026

JSON object

Loading...
3.7
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 2.2 / Impact: 1.4
Source: MITRE (Secondary)

Description

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.

Affected (1)

Products: Putty: Putty
Putty
1 product
Putty
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Putty
From 0.71 to 0.84

Related CWEs

CWE-617
Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (2)

Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
PatchVendor Advisory

Timeline

No history available yet.