CVE-2026-48852

Summary

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.

Affected Software

Weaknesses

• CWE-617: CWE-617 Reachable Assertion

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html
• https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/ecdsa-remotely-triggerable-assertion.html

• ←Previous
• Next→