Low severity3.1NVD Advisory· Published May 25, 2026· Updated May 27, 2026

CVE-2026-48851

Description

PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Putty/Putty2 versions
cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*range: >=0.77,<0.84
- (no CPE)range: >=0.77, <0.84

Patches

Vulnerability mechanics

References

www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/telnet-trust-sigil.htmlnvdPatchVendor Advisory
lists.tartarus.org/pipermail/putty-announce/2026/000042.htmlnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.202
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000