CVE Field Guide
About Us
CVE-2026-48852
PUBLISHED
Assigner:
mitre
Reserved:
25.05.2026
Published:
25.05.2026
Updated:
26.05.2026
PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS Score:
3.7
CVSS score
3.7
Attack Vector
Network
Scope
Unchanged
Attack Complexity
High
Confidentiality Impact
None
Privileges Required
None
Integrity Impact
None
User Interaction
None
Availability Impact
Low
CVSS 3.1
Product Status
Vendor
PuTTY
Product
PuTTY
Versions
Default:
unaffected
affected from 0.71 to 0.84 (excl.)
References
https://lists.tartarus.org/pipermail/putty-announce/2026/000042.html
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/ecdsa-remotely-triggerable-assertion.html
Problem Types
CWE-617 Reachable Assertion
CWE