WID-SEC-W-2026-1673

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

PuTTY: Mehrere Schwachstellen

view advisory published 2026-05-25

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PuTTY ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren und möglicherweise Spoofing-Angriffe durchzuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2026-48852US——
PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.
CVE-2026-48851US——
PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.
CVE-2026-48850USmedium5.9—
PuTTY 0.72 before 0.84 has a double free in RSA KEX.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan