CVE Catalog
CVE-2026-48850
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk0.32%
24th percentile - higher than 24% of all known CVEs
Summary
PuTTY versions 0.72 through before 0.84 have a double free vulnerability in RSA KEX handling.
Risk Assessment
The organization may face PuTTY client crashes or potential arbitrary code execution during SSH connections using RSA KEX.
Recommendation
Upgrade PuTTY to version 0.84 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
PuTTY 0.72 before 0.84 has a double free in RSA KEX.