CVE-2026-48852

LowCVSS 3.7

Published: 25/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

PuTTY versions 0.71 through 0.83 have an assertion failure in ECDSA signature verification. The issue is fixed in version 0.84.

An attacker could exploit this vulnerability to crash the PuTTY SSH client, potentially leading to denial of service or other adverse effects.

Update PuTTY to version 0.84 or later, which includes a fix for the assertion failure.

Original NVD description (English source)

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.